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FOREWORD 


The  National  Aerospace  &  Electronics  Conference  (NAECON)  provided  a 
forum  in  which  to  report  on  the  Automated  Maneuvering  Attack  System  (AMAS) 
Phase  of  the  AFTI/F-16  Program.  Three  NAECON  86  sessions  were  organized 
to  cover  AMAS  development,  integration  and  interim  flight  test  results. 

The  three  sessions,  formed  in  the  Flight  Control  Technology  Area,  were: 

AFTI/F-16  Automated  Maneuvering  Attack  System  (AMAS) 

AFTI/F-16  Automated  Maneuvering  Attack  System  Test  Report 


AFTI/F-16  Special  Technologies  and  Outlook 


The  technical  papers  from  these  sessions  were  published  in  the  NAECON 
86  Conference  Proceedings  under  the  auspices  of  the  Institute  of  Electrical 
and  Electronics  Engineers.  The  AFTI/F-16  Program  Office,  AFVAL/FII,  has 
elected  to  republish  the  papers  to  provide  a  means  of  broader  distribution 
to  individuals  and  organizations  with  an  Interest  in  the  AFTI/F-16  program. 
The  IEEE  grants  the  U.  S.  Government  royalty-free  permission  to  reproduce 
papers  for  U.  S.  Government  purposes.  This  document  is  intended  to  serve  as 
an  interim  AMAS  Phase  report  until  the  formal,  final  report  is  completed  in 
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ABSTRACT 

This  paper  provide*  an  overview  of  the  aeeond  phase 
of  the  Advanced  Fighter  Technology  integration 
(AFTU/P-iS  program,  the  Automated  Maneuvering 
Attack  System  (AMAS)  Phase.  The  AMAS  development 
builds  on  the  highly  successful  Digital  Flight  Control 
System  (DECS)  Phase  that  was  completed  la  IMS.  In  this 
follow-on  phase,  the  fire  control  and  avionics  have  been 
extensively  integrated  with  the  flight  control  system  to 
demonstrate  the  advanced  combat  capabilities  that  a 
highly  autoamtad  and  integrated  weapon  system  can 
provide.  The  AMAS  phase  is  midway  through  its  flight 
test  program.  This  special  NAECON  session  is  organised 
to  provide  a  report  of  the  development,  integration,  and 
interim  flight  test  results. 


The  approach  followed  in  the  two  major  phases  of 
the  AFTI/F-ll  program  is  illustrated  in  Figure  2.  The 
first  phase,  the  Digital  Flight  Control  System  (DFCS) 
Phase,  concentrated  on  the  development  of  an  advanced, 
multi-mode,  flight  control  system.  The  flight  research 
during  that  phase  involved  the  investigation  of  advanced 
control  lawa  and  decoupled,  flight-path  control  under 
pilot  control.  During  the  DFCS  Phase,  design  hooks  were 
provided  to  accommodate  hardware  and  software  growth 
to  support  the  objectives  of  the  follow-on  phase,  the 
Automated  Maneuvering  Attack  System  (AMAS)  Phase. 
This  phase  explores  combat  automation  and  integration 
concepts  that  are  enabled  through  extensive  integration 
of  the  flight  control  system  with  the  fire  control  and 
avionics  systems. 


INTRODUCTION 


The  objectives  of  the  AFTt/F-16  program  are  to 
develop,  to  integrate,  and  to  flight  validate  advanced 
fighter  technologies  that  will  enhance  the  combat 
effectivencM  and  survivability  of  our  future  fighter 
aircraft.  The  program  scope  includes  the  four  technology 
thrusts  shown  in  Figure  I,  with  focus  on  the  flexibility  of 
the  digital  flight  control  system  as  a  means  of  providing 
significant  improvements  to  capabilities  in  a  reliable  and 
cost  effective  manner.  The  payoff  of  the  program  is  the 
flight  validation  of  technology  alternatives  for  future 
fighter  aircraft.  The  AFTI/F-16  program  addresses  both 
the  air-to-air  and  the  air-to-surface  fighter  roles,  with 
emphasis  on  the  weapon-delivery  task. 
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Figure  1  Advance  Fighter  Technology  Integration 
(APTI/P-ld)  Technology  Thrusts 
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Figure  2  Program  Approach  and  Schedule 


The  AFTI/F-16  program  is  managed  by  the  Air 
Force  Wright  Aeronautical  Laboratories,  Wright- 
Pstterson  AFB,  Ohio.  The  program  is  a  joint  program 
that  has  included  the  participation  of  the  Air  Force, 
Army,  Navy,  and  NASA.  The  prime  contractor  for  system 
development  and  integration  is  General  Dynamics,  Fort 
Worth  Division.  The  flight  tests  are  being  conducted  at 
the  NASA  Ames-Dryden  Research  Facility  at  Edwards 
AFB,  California.  The  Joint  Test  Force  is  managed  by  the 
Air  Force  Flight  Test  Center,  with  participation  of  the 
NASA  and  contractor  test  teams. 


This  special  AFTI/F-16  session  at  NAECON  '86  has 
been  organized  to  provide  a  report  of  the  interim  results 
of  the  AMAS  Phase  of  the  program.  The  AMAS  devel- 


I 


opraent  has  been  underway  since  1980,  and  the  system 
development  and  software  integration  is  now  complete. 
The  AMAS  flight  testing  is  in  full  swing  with  a  scheduled 
completion  date  at  the  end  of  Fiscal  Year  1988.  This 
series  of  technical  reports  has  been  prepared  to  share 
with  you  our  findings  to  date  and  our  expectations  for  the 
remainder  of  the  program.  A  final  report  will  be 
published  in  1987. 


BACKGROUND  OF  AMAS  DEVELOPMENT 

The  modern  combat  scenario  is  characterized  by 
increased  numbers  of  enemy  targets,  both  on  the  ground 
and  in  the  air,  and  by  an  increasingly  hostile  airspace 
surrounding  these  targets.  This  changing  environment 
requires  timely  improvements  to  the  lethality  and 
survivability  of  our  next-generation  fighters.  This  places 
a  high  premium  on  achieving  a  first-pass  kill  while 
minimizing  exposure  to  the  threat.  Also,  because  of  the 
large  inventory  of  unguided  conventional  munitions  in  our 
arsenal,  our  Tactical  Air  Forces  must  be  able  to 
accomplish  their  mission  while  using  these  low-cost 
weapons. 

These  considerations  necessitate  a  high  degree  of 
maneuverability  to  quickly  achieve  an  advantageous 
weapon-delivery  position,  precision  control  during  final 
weapon  aiming,  and  the  development  of  weapon-delivery 
capabilities  that  take  full  advantage  of  the  operational 
flight  envelopes  of  our  fighters  (Figure  3).  Any  approach 
to  attacking  this  problem  must  also  prove  operationally 
suitable  in  terms  of  pilot  workload  and  system  safety. 
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Figure  3  Combat  Scenarios  That  Drive  AMAS  Design 


The  AMAS  flight  research  objectives  take  aim  at 
these  fighter  needs  by  demonstrating  and  validating 
several  new  combat  automation  concepts  built  around  the 
integration  of  flight  and  fire  control  system  functions. 
Through  closed-loop  coupling  of  the  sensors  to  the  flight 
controls,  precision  flight  path  control  can  be  achieved 
under  conditions  outside  the  bandwidth  of  the  human 
pilot.  This  allows  for  weapon  delivery  during  dynamic 
maneuvering,  and  opening  up  new  dimensions  for  working 
the  fighter  attack  problem,  as  well  as  providing  for 
workload  relief  in  the  fighter  cockpit  (Figure  4). 

The  forerunner  of  the  AFTI/F-16  AMAS  was  the 
joint  F-15  Integrated  Flight/Fire  Control  (IFFC)  and 
FIREFLY  III  program  sponsored  by  the  Air  Force's  Flight 
Dynamics  Laboratory  and  Avionics  Laboratory.  This 
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Figure  4  Payoff  of  AFTT/F-18  Technology  Integration 

program  demonstrated  the  feasibility  of  IFFC  technology, 
highlighted  by  the  shoot-down  of  a  QPM-102  drone  from  s 
front-quarter  gun  attack.  Also,  in  s  limited  flight  test 
against  Inertial  targets,  the  IFFC/P-1S  demonstrated  the 
feasibility  of  low-altitude  bombing  using  turning, 
curvilinear,  flight  paths.  The  FIREFLY  III  director  fire- 
control  algorithms  used  in  the  IFFC/F-15  provide  the 
baseline  for  the  integrated  AMAS  design. 

The  AFTI/F-16  program  builds  on  this  IFFC 
technology  by  providing  a  critical  evaluation  of  the 
technology  in  more  combat-relevant  scenarios  and  flight 
envelopes.  A  key  difference  between  the  IFFC/F-15  and 
the  AFTI/F-16  flight  demonstration  is  the  low-altitude, 
operating  requirement  that  has  generated  more  emphasis 
on  system  safety  design.  This  has  presented  a  design 
challenge  to  simultaneously  implement  the  IFFC 
algorithms,  satisfy  safety  requirements,  and  maintain  a 
practical,  low-cost  system  configuration.  Another  key 
difference  between  the  AFTI/F-16  AMAS  and  the 
IFFC/F-15  developments  is  the  flight  control  system 
design.  The  AFTI/F-16  DFCS  features  a  more  general¬ 
ized  command  structure  that  simplified  the  design  of  the 
couplers.  Also,  the  IFFC/F-15  demonstration  was  limited 
by  the  command  authority  from  an  electronic  Control 
Augmentation  System  (CAS);  the  AFTI/F-16  AMAS  uses  a 
full-authority  DFCS  that  provides  a  large  operational 
envelope. 


AMAS  OVERVIEW 

The  AMAS  flight  demonstration  addresses  two 
critical  questions:  (1)  how  far  can  platform  performance 
be  pushed  in  enhancing  the  delivery  of  ordnance,  and 
(2)  what  degree  of  combat  automation  is  needed  to 
accomplish  this  objective,  particularly  for  single-seat 
fighters?  To  answer  these  questions,  the  AMAS 
devL.«,pment  encompasses  a  broad,  extensively-integrated 
approach  to  providing  combat  automation  (Figure  5).  The 
cockpit  features  a  voice  system,  helmet  sight,  and 
tactical  situation  display  to  help  reduce  the  workload 
associated  with  operating  modern  avionics.  A 
conformally-mounted  sensor/tracker,  optimized  for 
multirole  attack  with  minimum  airframe-performance 
penalties,  provides  precision  target  information.  This 
target-state  information  is  further  processed  in  the  fire 
control  computer  which  provides  guidance  commands 
based  on  ballistic  computations  and  relative  geometry  to 
the  target.  At  the  weapon  interface,  the  AMAS  is 
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Figure  S 


A  MAS  Combat  Automation  Flight  Research 
Areas 


demonstrating  the  use  of  a  digital  MIL-STD-1760 
multiplex  bus  for  real-time,  automatic  fuzing  of  weapons. 


The  AMAS  flight  demonstrations  are  pushing 
combat-automation  technology  to  the  practical  flight 
envelopes  that  are  necessary  to  successfully  operate  in 
the  modern  combat  environment.  The  low-altitude,  air- 
to- surface  mission  requires  the  ability  to  ingress  st  very 
low  altitudes  and  deliver  weapons  using  threat  evasive 
maneuvers.  As  a  program  goal,  the  AMAS  bombing 
system  is  designed  to  deliver  weapons  in  a  4-5  g  lateral 
toss  maneuver  as  low  as  200-ft  AGL,  with  all-attitude 
ground  collision  avoidance  protection  (Figure  6).  For  the 
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Figure  • 


Air-to-Surface  Automated  Maneuvering 
Attack  Demonstration 


air-to-air  encounter,  a  more  versatile,  gunnery  system  is 
needed  to  complement  the  air-to-air  missile  capsbilities. 
The  AFTl/F-H  gunnery  system  is  designed  to  provide  an 
all-aspect  attack  capability,  to  include  a  head-on, 
automatic  attack  and  escape  maneuver.  This  capability 
provides  a  lethal  advantage  that  can  be  employed  as  s 
follow-up  to  a  missile  attack  (Figure  7). 


Associated  with  these  general  demonstration  goals, 
the  specific  programmatic  and  technical  objectives  of  the 
AMAS  phase  are  as  follows:  (1)  to  define  advanced 
integrated-fllght/fire  control  system  concepts  for  im¬ 
proving  combat  effectiveness  and  survivability  of  fighter 
aircraft,  (2)  to  identify  candidate  system  configurations 


Figure  7  All-Aspect  Aerial  Gunnery  Demonstration 


for  evaluation  of  performance  and  mission  effectiveness, 
(3)  to  integrate  a  digital,  multi-mode,  flight  control 
system,  advanced  controls  and  displays,  and  weapons  for 
validation  of  system  performance  and  mission  effec¬ 
tiveness,  (4)  to  quantify  improvements  in  weapons 
delivery  capabilities  and  accuracy  achievable  with  AMAS 
system  configurations,  (5)  to  assess  the  survivability 
achievable  as  a  result  of  evasive  maneuvering  profiles 
during  the  weapon-delivery  phase,  (6)  to  determine  pilot 
acceptance,  adaptability,  and  workload  reduction  asso¬ 
ciated  with  the  AMAS  modes  in  the  weapon-delivery 
phase,  and  (7)  to  establish  design  criteria  and 
recommendations  for  AMAS  technology  applications  and 
integration  of  associated  technologies.  These  objectives 
are  listed  here  to  provide  the  reader  with  a  better 
understanding  of  the  program.  No  attempt  is  made  in 
this  NAECON  session  to  individually  address  each 
objective. 


An  important  theme  to  keep  in  mind  during  this 
review  of  the  AMAS  development  is  that  the  system 
integration  is  a  technology  entity  of  its  own  rights.  The 
AFTI/F-16  AMAS  development,  which  departs  from 
traditional  integration  approaches,  in  many  ways  demon¬ 
strates  that  significant  capabilities  can  be  achieved 
through  the  software  integration  of  existing  technologies. 
The  capabilities  may  be  provided  enmasse,  or  as  a 
preplanned,  product  improvement  that  builds  on  several 
critical  technologies  and  integration  concepts.  These 
fundamental  building  blocks  include  a  multi-mode,  digital 
flight  control  system;  a  multiplexed,  digital-avionics 
architecture;  an  integrated  sensor  suite;  fault-tolerant 
interfaces;  a  distributed  approach  to  processing,  and  a 
supporting  pilot/vehicle  interface. 


SESSION  OUTLINE 


It  is  the  intent  of  these  NAECON  sessions  to  share 
with  you  our  results  and  the  lessons  learned,  so  that  our 
research  will  benefit  the  designs  of  our  nation's  future 
fighters.  Because  of  security  and  technology  export 
restrictions,  the  description  of  the  development  and  the 
results  will  be  sparse  in  several  areas.  However,  we  hope 
to  provide  a  comprehensive  overview  of  our  accom¬ 
plishments  in  terms  that  will  benefit  the  acquisition 
planners  of  government  and  industry.  In  this  first  AFTI/ 


F-18  session  we  will  be  reviewing  these  AMAS 
development  topics* 

AMAS  Configuration  Development  and  Integration 
APTl/F-16  Sensor/Tracker  Set 
Guidance  and  Control 
System-Safety  Design 

These  four  papers  will  cover  the  technical  approach 
in  detail,  emphasizing  the  engineering  and  operational 
factors  that  have  driven  the  design  to  the  present 
configuration.  Of  particular  interest  in  this  session  is  not 
just  the  effort  involved  in  putting  the  weapons  on  target 
with  regard  to  sensors,  target-state  estimation,  and 
guidance  and  control,  but  how  to  accomplish  this  task 
with  safety  and  confidence. 

The  second  session  will  cover  our  interim  test 
results  in  these  four  areas: 

Test  Summary 

Software  Development,  Integration,  and  Test 
Flight  Test  Results 
Pilot/Vehicle  Interface 

In  these  papers,  we  have  captured  the  key  results  of 
the  program  to  date  and  future  plans  for  the  remaining 
flight  testa.  This  session  will  also  provide  a  look  at  the 
challenges  and  frustrations  that  accompany  the  testing  of 
such  a  highly  integrated  system. 

Our  final  session  will  present  a  review  of  special 
technologies  that  are  associated  with  the  AMAS  program: 

Standardized  Avionics  Integrated  Fuzing  (SAIF) 

Voice  Interactive  Avionics 

Digital  Terrain  Management  and  Display  System 


These  flight  research  experiments  are  being  flown 
on  the  APTI/F-16  testbed  through  external  sponsorship  of 
other  government  agencies.  This  set  of  technologies  has 
been  instrumental  in  providing  an  end-to-end  look  at 
combat  automation,  from  the  cockpit  to  the  weapon 
interface. 

This  final  session  will  be  closed  with  a  paper  that 
presents  our  interpretation  of  the  operational  and 
technological  impacts  that  the  AF1T/P-16  program 
results  might  have.  In  particular,  this  paper  will  present 
a  roadmap  as  to  how  we  feel  the  integration  concepts  and 
individual  technologies  can  logically  evolve  into  opera¬ 
tional  systems  that  can  provide  very  high  payoffs  to  our 
future  fighter  capabilities. 

We  are  very  pleased  to  present  these  special 
AFTI/P-16  sessions  and  to  be  able  to  share  with  you  our 
experiences  in  developing,  integrating,  and  flight  testing 
the  AFT1/F-18  Automated  Maneuvering  Attack  System. 


OVERVIEW  CLOSURE 

The  charter  of  the  AFTI/F-18  Program  has  been  to 
move  technology  from  the  laboratory  to  the  operational 
Air  Force.  An  important  step  in  that  process  is  the 
communication  of  results,  and  we  are  pleased  to  have  this 
chance  at  NAECON  '88  to  share  our  experiences  with 
you. 

At  the  conclusion  of  the  last  AFT1/F-16  session,  a 
final  wrap-up  paper  will  present  our  results  in  terms  of 
the  operational  and  technological  implications  they  might 
have.  In  particular,  this  paper  will  present  a  roadmap  of 
the  direction,  we  feel,  that  the  AFTI/F-18  integration 
concepts  and  contributing  technologies  could  take. 

The  AFTI/F-16  Automated  Maneuvering  Attack  Sys¬ 
tem  Phase  has  provided  the  opportunity  to  evolve  and  to 
validate  some  very  exciting  and  promising  combat  auto¬ 
mation  concepts.  With  pride,  we  present  to  NAECON  '86 
the  culmination  of  our  research  that  is  pioneering  new 
ways  to  fly  and  to  fight. 
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ABSTRACT 

The  AFTI/F-16  Advanced  Development  Program  is 
developing  and  integrating  advanced  technologies,  that 
will  improve  fighter  lethality  and  survivability.  Improved 
miseion  capabilities  are  achieved  through  integration  of 
task-tailored,  digital  flight  controls,  fire  control,  attack 
sensors  weapon  interfaces,  mission  avionics  and  asso¬ 
ciated  controls  and  displays  into  an  Automated 
Maneuvering  Attack  System  (AMAS).  The  core  building 
block  was  achieved  In  the  Phase  I  -  Digital  Flight  Control 
System  (DFCS)  development,  which  emphasized  fault- 
tolerant,  inner-loop  flight  path  control,  avionics  inte¬ 
gration  and  cockpit  interfaces.  Phase  II  -  Automated 
Maneuvering  Attack  System  development  expands  the 
baseline  systems  in  conjunction  with  a  new  FLIR-LASER 
Sensor/Tracker  to  demonstrate  significant  advancements 
in  combat  automation  technology.  This  paper  sum¬ 
marises  the  Phase  II  AMAS  configuration  development 
and  integration  with  emphasis  on  mechanization  con¬ 
cepts,  design  rationale,  and  critical  system-integration 
considerations. 


ACRONYMS  AND  ABBREVIATIONS 

A-A  Air-To-Air 

A-S  Air-to- Surface 

AFTI  Advanced  Fighter  Technology  Integration 

AGL  Above-Ground-Level 

AMAS  Automated  Maneuvering  Attack  System 

AMUX  Avionics  Multiplex  Data  Bus 

BIT  Built-In-Test 

db  Decibels 

DCR  Design  Change  Request 

DC/CIS  Data  Entry/Cockpit  Interface  Set 

DFCS  Digital  Flight  Control  System 

DMG  Digital  Map  Generator 

DMUX  Display  Multiplex  Bus 

DOF  Degree-Of-Freedom 

DR  Deficiency  Report 

E-O  Electro-Optical 

EMI  Electro-Magnetic  Interfaces 

EMOS  Electronic  Mail/Office  System 

FCC  Fire  Control  Computer 

FCS  Flight  Control  System 

FLCC  Flight  Control  Computer 

FUR  Forward-Looking  Infrared  Radar 

FOR  Field-Of- Regard 

POV  Pield-Of-View 

HMS  Helmet  Mounted  Sight 

HUD  Head-up  Display 
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ID 

Identification 

IFFC 

Integrated  Fire  and  Flight  Control 

IFIM 

In-Flight  Integrity  Management 

INS 

Inertial  Navigation  System 

IS 

Ingress  Steering 

LAE 

Lead  Angle  Error 

LARAP 

Low  Altitude  Radar  Auto  Pilot 

LOS 

Lina  of  Sight 

LRU 

Line  Replaceable  Unit 

MFDS 

Multifunction  Display  Set 

MSIP 

Multinational  Staged  Improvement  Program 

NWL 

Non-Wings  Level 

OFP 

Operational  Flight  Program 

OMR 

Operational  Mission  Requirements 

PK 

Probability  of  Kill 

PVI 

Pilot/Vehicle  Interface 

RALT 

Radar  Altimeter 

SAIF 

Standardized  Avionics  Integrated  Fuzing 

STAN 

Sandia  Inertial  Terrain-Aided  Navigation 

STS 

Sensor/Tracker  Set 

SWIM 

System-Wide  Integrity  Management 

TMD 

Tatical  Munition  Dispenser 

TSE 

Target  State  Estimate 

VFR 

Visual  Flight  Rules 

WL 

Wings  Level 

WMUX 

Weapons  Multiplex  Data  Bus 

SYSTEM  DESIGN 


Design  requirements  for  the  AFTI/F-16  are  driven 
by  realistic  air  combat  scenarios  and  are  shown  in  Figure 
1.  The  threat  environment  of  the  1990's  is  projected  to 
become  increasingly  difficult  and  complex.  In  the  case  of 
air-to-surface  attack,  survivability  is  a  dominant  factor. 
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Figure  1  AMAS  Combat  Scenarios 
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High-spee d  maneuvering  flight  at  very  low  altitude  is  an 
effective  tactic  for  enhancing  survivability.  However, 
higher  levels  of  technology  integration  and  combat 
automation  are  progressively  becoming  required  to  enable 
the  pilot  to  accomplish  the  critical  functions  of  flight 
path  control,  threat  management,  navigation,  attack 
engagement  and  weapon  system  management. 

The  AFT1/F-16  AMAS  is  truly  an  experiment  in 
system  automation  and  integration.  As  depicted  in 
Figure  2,  automation  is  the  key  to  accomplishing  the 
coupled  AMAS  weapon  delivery  profiles  in  a  single-seat 
fighter.  Pilot  task  saturation  is  inevitable  if  this  is  not 
accomplished  to  almost  the  maximum  extent  possible. 
Figure  2  illustrates  the  functions  in  the  AMAS  that  have 
been  automated,  in  each  mission,  air-to-air  and  air-to- 
ground,  tasks  requiring  pilot  actions  that  were  definable 
and  state-driven  were  automated.  The  other  important 
development  was  the  integration  of  the  subsystems  into  a 
congruent  system  with  proper  functional  partitioning  and 
well-defined  interfaces  (Figure  3). 


Figure  2  AFTI/F-16  Combat  Automation 


One  of  the  key  characteristics  of  the  AMAS  is  that 
it  extends  the  integration  process  into  closed-loop  control 
function.  This  brings  many  single-thread  elements  and 
avionics  functions  into  the  closed-loop  control  of  the 
aircraft.  Considerations  of  flight  safety  and  system-wide 
integrity  must  be  addressed  and  satisfied.  Figure  4 
illustrates  the  closed-loop  structure  of  the  AMAS. 


Figure  4  AMAS  Closed-Loop  Control 


The  nature  of  the  automated  weapon  delivery 
requires  that  an  automated  ground  and  target  collision 
avoidance  system  be  implement ®d.  The  ground  collision 
avoidance  was  developed  around  the  concept  of  estab¬ 
lishing  a  pilot  selectable  minimum  descent  altitude,  l.e., 
a  floor,  that  the  aircraft  would  not  be  allowed  to 
penetrate.  Should  penetration  be  predicted,  the  auto¬ 
mated  fly-up  maneuver  la  activated.  In  air  combat,  the 
automated  breakaway  maneuver  is  engaged  when  a 
minimum  avoidance  criteria  is  violated. 

System-Wide  Integrity  Management  (SWIM)  also  is  a 
necessity  for  safe,  reliable  combat  automation.  Through 
the  use  of  interactive  built-in  test,  continuous  inflight 
integrity  testing,  and  automated  enforcement  of  estab¬ 
lished  operating  restrictions,  the  system  provides  a 
measure  of  system  operating  integrity  and  safety  against 
failures  and  Improper  operation. 

The  approach  taken  in  implementing  the  AMAS 
system  was  to  make  it  software  intensive,  hosting  where 
possible  in  existing  OFPs.  Minimal  additional  equipment, 
and  maximum  integration  of  available  subsystems  were 
used  to  accomplish  the  automated  air-to-air  and  air-to- 
ground  weapon  delivery. 

Integrated  Fire/FUght  Control  (IFFC) 

The  AFTI/F-16  AMAS  can  be  characterized  as  a 
complex,  multirate  closed-loop  control  problem  as  shown 
in  Figure  4,  where  the  key  controlled  parameters  are 
relative  target  position  and  orientation. 

The  system  must  accommodate  both  highly  dynamic 
aerial  targets  and  relatively  slow-moving  or  fixed  ground 
targets.  Inertial  line-of-sight  rates  can  exceed  50  to  75 
degrees/sec.  Accurate,  low-noise  target  sensing/tracking 
at  these  high  rates  is  essential.  A  9-state  Kalman  filter 
using  multiple,  independent  sensor  inputs  provided  the 
data  for  the  fire  control  algorithm  to  compute  the 
weapon  delivery  solution,  thereby  generating  the  required 
lead-angle  error  and  LOS  commands  to  the  primary  flight 
control  system.  Accomplishing  this  task  involves  multi¬ 
ple  coordinate  transformations  relative  to  ownship  body 
coordinates,  target  earth  axis  and  inertial  coordinate 
systems.  DFCS  inner-loop  surface  commands  provide  the 
final  response  to  null  relative  target  position  errors. 

Achieving  the  required  system  accuracy,  bandwidth 
and  stability  represents  a  significant  control  dynamics 
challenge.  Successful  combat  automation  is  dependent  on 
the  integration  of  several  key  functions  as  described 
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above.  The  primary  alamanta  which  provide  this 
capability  arc  delineated  below. 

o  Digital  Flight  Control  Syatem 

o  Automatic  Flight  Path  Guidance 

o  E-0  Senior /Tracker  Set 

o  Integrated  Avionics  Architecture 

o  System-Wide  Integrity  Management 

o  Pilot/Vehicle  Interface 

The  AFTI/F-16  AMAS  embodies  the  IFFC  concept 
to  provide  steering  commands  for  satisfying  the  fire 
control  weapon  delivery  solution.  Figure  S  illustrates  the 
functional  partitioning  and  signal  flow  established  to 
optimise  system  interfaces  and  achieve  acceptable 
dynamic  performance.  The  AMAS  mechanization  builds 
on  the  DFCS  baseline  configuration  developed  and  flight 
tested  in  Phase  L  The  Sensor/Tracker  Set  is  the  only  new 
hardware  development  required  for  closed-loop  system 
operation.  All  other  AMAS  functions  were  implemented 
in  software  using  existing  hardware  elements. 


Figure  S  AMAS  Signal  Flow 


AMAS  Bombing 

The  AMAS  bombing  mission,  Figure  6,  was  designed 
to  provide  increased  survivability  while  maintaining 
weapon  delivery  accuracy.  To  maximize  survivability 
through  threat  intervisibility  considerations,  the  mission 
was  driven  to  extremely  low  ground  clearances.  The 
impact  of  the  low-altitude  mission  was  reflected  in 
several  design  features  such  as  system-  wide  integrity 
management  (SWIM),  automated  ground  collision 
avoidance,  the  laser  ranger,  and  a  low-altitude  radar 
autopilot  (LARAP). 

The  automated  phase  of  the  mission  includes  ingress 
to  the  target,  target  attack,  weapon  -..livery,  and  an 
egress  maneuver.  Figure  S  also  illustrates  the  functions 
or  actions  performed  during  the  bombing  mission.  The 
required  pilot  actions  during  the  bomb  delivery  are 
system  engagement,  target  designation  or  refinement, 
and  consent  for  weapon  release.  The  range  to  target  at 
weapon  release  is  pilot  selectable  and  must  be  entered 
into  the  system  prior  to  automated  operation.  Target 


position  or  designation  may  be  accomplishes  in  a  variety 
of  ways,  inertial  coordinates,  radar  designate,  helmet- 
mounted  sight  designate,  and  sensor/tracker  designate 
and  track.  Utilizing  the  senaor/tracker  and  laser  ranger 
removes  the  INU  drift  error  in  target  location  and 
provides  good  low-grazing  angle  range  determination. 


Figure  I  AMAS  Bombing 

The  guidance  laws  are  divided  into  three  categories 
for  the  mission  segment  of  (1)  Ingress,  (2)  attack  and  (3) 
agrees.  The  Ingress  guidance  is  destination  steering  to 
the  point  where  transition  to  the  non-wings-level  attack 
maneuver  will  occur.  During  this  period  the  low-altitude 
radar  autopilot  provides  a  set  ground  clearance  for 
essentially  level  terrain.  The  attack  guidance  performs  a 
curvilinear  non-wlnge-level  turning  profile  to  deliver  the 
weapon  at  the  preselected  release  range.  This  can  be  a 
climb,  a  dive,  or  a  climb  and  then  dive  to  the  release 
point.  The  egress  maneuver  quickly  returns  the  aircraft 
to  the  preselected  egress  altitude  while  maintaining  a 
turning  flight  path. 

The  pilot  is  presented  a  variety  of  displays  to 
improve  his  situation  awareness.  As  shown  in  Figure  7 
there  are  four  major  instrument  panel  displays  and  the 
helmet-mounted  sight  (HMS).  Each  display  contains 
pertinent  but  dissimilar  information  that  allows  the  pilot 
to  evaluate  system  performance  and  determine  any 
desired  changes.  The  pilot  has  override  control  in  ail 
axes  and  several  ways  to  disengage  the  system  should  he 
desire.  The  pilot  also  has  hands-on  control  for  all 


Figure  7  Optimized  Pliot/Vehicle  Interface 


fawtioM  that  would  normally  bo  expected  to  bo  changed. 
Ha  can  alao  uao  using  tbo  Interactive  voice  command 

system. 

A  MAX  Alr-to-Air 

The  AMAS  air-to-air  gunnery  was .  designed  to 
provide  a  high  angle-off  gunnery  system  capable  of  front- 
quarter  attacks.  The  air-to-air  engagement,  illustrated  in 
Figure  I,  includes  automated  target  acquisition  and  track 
with  the  capability  of  a  helmet-mounted  sight  (HMS) 
designation  and  hands-on  system  engagement. 


Figure  t  AMAS  Alr-to-Alr  Combat 

Because  of  cost  constraints,  the  AMAS  testbed 
configuration  employs  a  single,  active  sensor/tracker 
mounted  in  the  right  wing  stroke.  Although  sufficient  to 
demonstrate  air-to-air  potential  in  a  test  program,  an 
operational  system  would  likely  employ  a  dual-head  con¬ 
figuration  to  provide  a  120  degree  hyper-hemispherical 
field-of-regard  (FOR)  as  shown  in  Figure  9.  A  low-drag 
installation  was  chosen  to  minimise  aerodynamic  per¬ 
formance  Impacts  for  multirole  applications.  The  large 
FOR  provides  considerable  mission  utility  and  maneu¬ 
vering  flexibility  during  target  acquisition  and  tracking 
phases. 


Figure  9  Low-Drag  AMAS  Senaor/Traeker  Provides 
Fleld-of- Regard 


The  sensor/tracker  can  perform  a  point  track  for 
small  targets  or  a  centroid  track  in  the  air-to-air  mode. 
The  AMAS  air  combat  IFFC  is  a  full-authority  system 
with  consent/automated  gunfire  and  automated  target 
collision  avoidance.  The  fire  control  director  solution  is 
derived  for  target  state  information  generated  by  a  9- 
state  Kalman  filter  residing  in  the  sensor/tracker.  The 
fire  control  system  provides  lead-angle  error  and  gun 
angular  rate  to  the  flight  control  systems  for  it  to  null 
the  error  and  match  the  rate.  The  flight  control  system 
primarily  rolls  the  aircraft  to  drive  aximuth  error  into 
the  elevation  axis.  It  then  nulls  the  elevation  error  and 
matches  the  gun  rate  through  the  aircraft  pitch  axis 
response. 

The  head-up  display  is  the  primary  gunnery  display 
with  the  HMS  providing  additional  target  designation 
capability  and  the  multifunction  displays  providing  radar 
and  FUR  displays  for  target  location  and  identification. 
The  pilot  may  blend  manual  inputs  into  the  IFFC  system 
to  improve  performance  or  bias  the  gun  aiming.  Upon 
engagement,  the  twist  throttle  and  rudder  pedals  are  used 
for  this  purpose.  The  pilot  also  has  override  capability  in 
all  axes  and  several  ways  to  disengage  the  system. 


SYSTEM  CONFIGURATION 

The  AFTI/F-lf  AMAS  aircraft  configuration  is 
Illustrated  in  Figure  10.  It  is  an  early  model  F-10  with 
external  differences  being  the  senaor/tracker  installation, 
the  inert  pod,  the  dorsal  fairing,  and  the  vertical  canards. 
Internally,  it  possesses  an  advanced  cockpit  design,  the  F- 
10  advanced  avionics,  a  triple-redundant  digital  flight 
control,  a  tactical  management  display,  a  helmet- 
mounted  sight,  a  360-degree-bank-angle,  radar  altimeter, 
interactive  voice  system,  flight-test  instrumentation,  and 
the  AMAS  peculiar  software. 


Figure  10  AFTI/F-16  Testbed  Configuration 


Integrated  System  Architecture 

The  AMAS  electronics  are  structured  around  a 
multibus  architecture,  and  the  two  major  multiplex  buses 
are  a  dual-channel  15S3  bus  structure.  These  are  termed 
the  avionics  bus  and  the  display  bus.  The  fire  control 
computer  and  the  stores  management  computers  inter¬ 
face  with  both  buses  providing  inter-bus  communications. 
The  third  bus  is  a  MIL-STD  1760  weapons  multiplex  bus. 
Redundant  hardware  successfully  communicates  on  the 
buses  as  the  flight  control  computers  are  triplex,  the 


stores  management  computers  are  dual,  and  the  displays 
contain  redundant  elements.  The  specific  partitioning  of 
A  MAS  functions  is  also  illustrated  in  Figure  11. 


Figure  11  Functional  Partitioning 


One  of  the  major  challenges  in  airplane  design  is  the 
trade-off  between  the  benefits  and  penalties  associated 
with  each  technology  feature.  The  benefits  always  seem 
to  bring  with  them  penalties,  in  the  form  of  complexity, 
expense,  weight  or  drag.  With  AFTI/F-16  we  have  made  a 
major  effort  to  integrate  the  avionics  into  a  digital 
architecture  that  simplifies  and  reduces  the  physical  and 
algorithmic  penalties  to  avoid  overly  complex  systems. 
The  architecture  is  a  natural  for  autopilot  functions, 
since  the  triplex  flight  control  is  integrated  into  its 
structure.  Furthermore,  the  compact  and  efficient 
organisation  of  the  communications  has  allowed  a  major 
AFTI/F-16  thrust  into  SWIM.  Although  the  bulk  of  the 
avionics  systems  are  single-thread,  much  of  the  sensed 
data  is  inherently  related.  Therefore,  by  making  com¬ 
parisons  of  "massaged"  data  it  is  possible  to  achieve 
considerable  "fail  safe”  coverage  as  will  be  discussed 
later. 

Data  transport  delay  for  the  serial  digital 
communication  has  been  carefully  studied.  The  effect  on 
system  accuracy  can  be  shown  to  be  quite  small  because 
the  bus  refresh  time  is  small  compared  to  other  periods 
of  uncertainty,  for  example,  bullet  flight  time.  Of  more 
concern  has  been  the  delay  on  the  closed  "outer  loop" 
stability.  After  making  comparisons  to  delays,  which 
would  also  exist  in  a  realistic  hybrid  digital  system,  with 
analog  signal  paths  we  concluded  that  the  real  transport 
penalty  for  busing  the  command  signals  is  less  than  SO 
milliseconds.  The  analytically  derived  stability  margins 
for  the  IFFC  are  excellent  when  compared  with  those 
normally  required  for  flight  control  inner-loops. 

Inner-loop  flight-path  control  is  accomplished 
through  the  triplex  digital  flight  control  system.  The 
advanced  highly  reliable  fault  tolerant  DFCS  is  the  core 
building  block  for  implementing  AMAS  capabilities  in  a 
safe  and  practical  manner.  Significant  design  features 
include:  (1)  task-tailored  multimode  control  laws  incorp¬ 
orating  decoupled  6  DOF  direct  force  and  weapon-line 
pointing;  (2)  triply  redundant  flight  control  computer 
complex  using  advanced  redundancy  management  tech¬ 
niques;  (3)  compatible  interface  for  integration  with 
other  subsystems,  such  as  fire  control,  mission  avionics, 
and  associated  multipurpose  displays;  and  (4)  Independent 


back-up  and  sensor  reconfiguration  modes  for  added 
safety. 

The  manual  DFCS  is  augmented  to  implement  two 
AMAS  functions  which  are  logically  partitioned  to  that 
subsystem.  First,  weapon  aiming  errors,  which  are 
computed  in  the  FCC,  must  be  coupled  into  body-rate  and 
acceleration  commands  usable  by  the  inner-loop  flight 
control  laws.  This  conversion  is  accomplished  in  the 
DFCS,  because  it  involves  signal  blending  with  high- 
bandwidth  aircraft  state  feedbacks  and  pilot  commands 
for  which  transport  delays  must  be  minimized.  Command 
couplers  are  implemented  for  automatic  gunnery,  non- 
wings-level  bombing,  wlngs-level  bombing,  and  an 
altitude/roll-attitude  hold  autopilot.  An  alternate  com¬ 
mand  algorithm  is  engaged  to  prevent  unsafe  alr-to- 
surface  operating  conditions.  In  this  function,  a  flyup 
command  overrides  or  disengages  the  normal  AMAS 
guidance  when  certain  system  failures  are  detected,  or 
when  a  projected  ground  clearance  is  inadequate.  The 
second  AMAS  function  performed  by  the  DFCS  is  the 
overall  assurance  of  system  integrity  prior  to  and  during 
system  engagement.  In  this  role,  the  DFCS  makes  use  of 
the  In-Flight  Integrity  Management  (IFIM)  tests  per¬ 
formed  by  other  avionics  subsystems.  It  also  performs 
independent  tests  to  validate  the  key  inputs  from  the 
FCC  and  INS.  Finally,  the  DFCS  maintains  sufficient 
Information  to  autonomously  recover  from  a  system 
malfunction. 

System- Wide  Integrity  Management 

The  System-Wide  Integrity  Management  (SWIM) 
function  (Figure  12)  provides  the  overall  safety  net  for 
the  complete  AMAS  design.  The  in-flight  SWIM  function 
consolidates  the  monitoring  of  critical  flight  safety 
parameters  provided  by  the  avionics  subsystem  IFIM  and 
various  flight  control  sensors.  Additionally,  along  with 
the  results  of  the  IFIM  monitors.  Operational  Mission 
Requirements  (OMR)  are  independently  monitored  by  the 
FCS  to  provide  a  continuous  qualification  of  AMAS 
integrity.  Also,  the  SWIM  function  provides  for  safe 
recovery  and  transition  to  manual  flight  control  from 
automated  modes. 
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Figure  13  System-Wide  Integrity  Management 

A  sound  design  apy,oach  first  begins  with  a  clear 
identification  of  the  central  problem:  automated 
maneuvering  of  a  high  performance  fighter  at  close 
proximity  to  the  ground  demands  a  rapid  assessment  of 
systemic  hazards  resulting  from  malfunction  or 
miscalculation.  In  addition,  timely  action  must  follow  to 
provide  (1)  a  safe  recovery  from  the  existing  situation;  (2) 
the  detention  of  suspected  controlling  subsystems;  (3)  an 
orderly  resumption  of  manual  pilot  control;  and  (4)  the 


proper  identification  and  annunciation  of  faults.  Opera¬ 
tional  considerations  (e.g.,  mission  requirements)  pre¬ 
clude  a  simple  response  to  every  situation  because  many 
faults  do  not  present  a  hazard  while  other  faults  are 
hazardous  only  under  certain  conditions.  For  example( 
the  traditional  "flyup"  maneuver  is  not  a  warranted 
response  when  adequate  altitude  above  ground  level 
(AGL)  exists;  it  could  easily  be  ranked  as  a  nuisance 
under  such  conditions.  All  these  issues  dictate  thoughtful 
design  consideration  in  proper  identification  and 
classification  of  hazards. 

Potential  hazards  can  be  grouped  into  three  major 
categories  related  to  (1)  the  physical  elements  (e.g., 
hardware,  pilot,  vehicle);  (2)  the  processing  elements 
(e.g.,  algorithms,  procedures,  priorities);  and  (3)  the 
information  which  defines  the  state  of  the  system  such  as 
altitude,  airspeed,  pilot-stick  force,  etc. 

There  are  five  physical  partitions  to  the  overall 
AMAS  System-Wide  Integrity  Management,  one  of  which 
resides  in  the  DFCS  OFP.  The  other  four  partitions 
support  the  overall  objectives  of  flight  safety,  some  of 
which  are  procedural  in  nature.  These  partitions  provide 
five  lines  of  defense  against  hazards  and  are  specifically: 

1.  Rigorous  design  testing 

2.  Subsystem  BIT,  self  test  and  (FIM 

3.  FCC  SWIM 

4.  FCS  SWIM 

5.  Pilot  actions. 

Each  level  of  defense  provides  compensation  for  the 
limited  coverage  by  the  preceding  levels.  To  be  truly 
effective  in  its  implementation,  the  FCS  SWIM  function 
must  be  supported  by  other  subsystem  SWIM  functions. 

During  in-flight  operations,  the  FCC  and  FCS  share 
the  majority  of  automated  management  functions.  The 
FCC  functions  as  the  communications  monitor  in  that  it 
maintains  control  of  AMUX  and  DMUX  traffic.  In 
addition  to  its  fire  control  function,  the  FCC  also 
consolidates  the  avionics  subsystem  [FIM.  This  is  a 
natural  partitioning  of  SWIM  in  that  data  from  many 
subsystem  sensors  are  required  for  traditional  FCC 
functions. 

The  FCS  monitors  AMAS  flight  control  commands 
coming  from  the  FCC.  During  surface  mode  operation 
these  commands  are  tested  for  reasonable  content 
consistent  with  flight  safety.  Commands  which  aggra¬ 
vate  the  level  of  risk  either  result  in  ultimate  dis¬ 
engagement  of  AMAS  operation  or  are  limited  to  levels 
more  appropriate  to  safe  control  of  flight. 

The  FCC  provides  the  FCS  with  a  separate  validity 
bit  accounting  for  each  flight-control  command  signal. 
This  validity  bit  signifies  that  the  FCC  considers  the 
related  subsystems  to  be  functional.  The  FCC  is  required 
to  process  a  set  of  two  problems,  which  are  to  be  worked 
during  alternate  FCC  computational  frames,  and  the 
results  are  relayed  to  the  FCS  via  the  AMUX.  The  FCS, 
in  turn,  checks  the  results  for  validity  and  cycling.  This 
assures  the  Integrity  of  that  specific  FCC  computational 
process  and  the  active  status  of  the  FCC  at  that  point. 


Additional  FCC  processing  checks  are  made  with 
regard  to  a  checksum  calculation  upon  flight-critical 
command  parameters  relayed  to  the  FCS  via  AMUX. 
These  processing  checks  provide  a  measure  of  assurance 
that  FCC  processing  and  process  control  Is  taking  place. 
It  should  be  pointed  out  that  the  FCC  itself  contains  a 
hardware  timer  trap  device  called  COP  which  resembles 
the  FCS  watchdog  timer.  If  the  COP  timer  is  not 
managed  correctly  by  the  FCC  OFP,  it  will  shut  down 
FCC  AMUX  operation  altogether.  The  FCS  checks  pre¬ 
viously  described  are  fashioned  to  act  as  a  staged  backup 
to  the  FCC  self-test  structure. 

The  communication  media  is  being  continuously 
monitored  by  the  FCS  in  normal  AMUX  processing.  Stale 
data  encounters  are  noted  and  persistence  counters 
maintained  to  determine  FCS  tolerance  levels.  Because 
the  AMUX  function  is  essential  to  normal  AMAS 
operation,  a  disengagement  results  if  the  AMUX  is  judged 
to  be  unusable. 

The  DFCS  SWIM  is  tasked  with  the  monitoring  of 
information  related  to  operational  mission  requirements. 
Such  information  can  be  broad  in  scope,  but  each  form 
has  one  thing  in  common;  it  originates  outside  the 
hardware  system  and  must  be  construed  from  sensor 
functions.  Examples  include  the  use  of  maximum  pilot 
stick  force  to  disengage  AMAS  operation.  This  construct 
does  not  reflect  a  malfunction;  it  is  devised  solely  to 
provide  for  an  optional  pilot  action,  possibly  in  response 
to  a  potential  hazard.  Another  example  is  a  stalled 
condition,  i.e.,  angle  of  attack  greater  than  29  degrees. 
Such  a  condition  Is  identified  as  outside  the  scope  of 
AMAS  operations.  As  such,  it  is  imperative  that  AMAS 
operations  be  discontinued  in  recovery  from  a  stall  for 
reasons  of  safety.  Additional  conditions  exist  that  define 
the  acceptable  state  of  AMAS  operation.  These  con¬ 
ditions  include  Mach  number,  minimum  altitude,  protocol 
in  mode  selection,  and  so  on.  Because  they  usually 
involve  the  operational  groundrules  for  safe  AMAS 
operation,  they  need  to  be  considered  as  a  distinct 
category. 

Sensor /Tracker  Set 

The  STS,  Figure  13  is  the  primary  sensor  for  the 
AFTI/F-16  Automated  Maneuvering  Attack  System 
(AMAS).  The  STS  was  developed  for  General  Dynamics 
by  Westinghouse  Defense  and  Electronics  Center, 
Baltimore,  Maryland  and  provides  the  features  shown  in 
Figure  14. 


Figure  13  Sensor /Tracker  LRUs 
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Figure  14  Key  S/T  Features 


The  desired  small  cross  section  and  short  length, 
required  for  installation  at  the  strake  location,  was 
achieved  by  a  combination  of  good  partitioning,  cooling, 
and  package  design.  The  STS  was  partitioned  Into  three 
line-replaceable  units  (LRUs)  as  shown  in  Figure  13.  The 
sensor  head  contains  the  sensors  and  gimbals.  The 
processor  contains  the  computer  processing  function  and 
the  signal  interface  with  the  AFTI  avionics.  The 
processor  contains  a  1750A  general-purpose  computer,  an 
Intel.MM-besed  video  tracker  computer  and  a  Motorola 
68000-besed  video  reformator. 

Two  of  the  three  STS  LRUs  are  installed  in  the 
AFTI/F-16  aircraft  in  the  locations  shown  in  Figure  10. 
The  dummy  head  in  the  left  strake  location  is  provided 
for  aerodynamic  symmetry.  The  processor  is  mounted  aft 
of  the  cockpit  in  the  AFTVF-10  peculiar  dorsal  bay.  The 
auxiliary  power  supply  is  installed  in  the  right  inlet  bay. 

The  st rakes  are  among  the  best  EO  sensor 
installation  locations  on  the  F-18  aircraft  for  coverage 
capability  (see  Figure  15).  Only  the  nose,  occupied  by  the 
F-10  radar,  provides  clearer  coverage.  The  strake  and 
nose  locations  alone  permit  uplook  and  downlook  sensor 
coverage  without  the  necessity  for  handoff.  Figure  14 


presents  the  masking  envelope  for  a  right  strake  sensor 
head.  Uplook  and  downlook  coverage  matches  the  AMAS 
requirement,  inboard  masking  occurs  at  approximately 
13  degrees  and  prohibits  wings-levei,  left-offset  target 
acquisition.  The  decision  to  procure  a  single-head  STS 
configuration  was  based  on  cost  considerations  only. 
Fortunately,  the  impact  on  system  evaluation  in  the 
AMAS  application  has  been  slight. 

[  WIGHT  STRAKE  CATAtlLITV  | 


Figure  It  Ingle  Baud  Obscuration 


The  STS  includes  a  software-implemented  9-state 
Kalman  filter  derived  from  the  APG-66  (F-18)  radar 
Target  State  Estimator  (TSE).  The  TSE  fuses  time- 
tagged  radar  mge  and  range-rate  data,  if  available,  with 
laser  range  and  sensor  head  line-of-sight  angle 
measurements.  The  radar  data  also  is  used  to  preload  the 
TSE  matrix  elements,  in  order  to  reduce  settling  time 
after  track  entry. 
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The  TSE  output  is  provided  in  platform  coordinates 
to  reduce  ownship-induced  output  data  variations.  A 
stable  TSE  output  is  essential  to  the  suppression  of 
unwanted  ownship  oscillations  in  the  flight  control 
command  loop.  In  A-A  track  TSE  outputs  include  target 
relative  position,  inertial  velocity,  and  acceleration.  For 
A-S  track,  only  position  and  velocity  are  provided. 

The  modes  of  operation  of  the  STS  are  presented  in 
Figure  17.  All  modes  and  control  options  are  automated 


Figure  19  Dual-Head  Obscuration 


Figure  17  S/T  Modes 


through  the  flro  control  computer  or  by  integral  STS 
function*  as  illustrated  in  Figure  II.  Also,  the  pilot  has 
an  override/selection  capability  on  all  usable  control 
options. 


Figure  It  Automated  Mode  Control 


Ptlot/Vehiel*  Interface  (PVQ 

A  very  substantial  development  effort  has  been 
accorded  to  designing  the  pilot  Into,  not  out  of,  the 
system.  Pilot  acceptance  of  the  integrated,  automated 
systems  is  crucial.  He  must  believe  that  the  automatic 
flight  path  control  is  safe,  and  he  must  be  given  a 
satisfactory  interface  to  the  vehicle.  Situational 
awareness  is  obtained  through  a  combination  of  the  head- 
up  display  that  includes  predictive  information,  multi¬ 
purpose  displays,  a  color  map  display,  helmet- mounted 
sight  cues,  and  voice  feedback.  The  controls  and  displays 
have  been  designed  to  provide  acceptable  pilot  workload 
’<nd  efficiency  during  all  of  the  mission  phases.  A 
significant  portion  of  flight  testing  haa  been  dedicated  to 
evaluating  the  effectiveness  of  the  pilot/vehicle  inter¬ 
face  features.  The  AFTI/F-16  cockpit  is  shown  in  Figure 
7.  Specific  design  features,  rationale  and  projected, 
future  emphasis  are  discussed  in  the  following 
paragraphs. 

Head-Up  Display  (HUD) 

The  HUD  was  developed  for  the  AFTI/F-18  during 
the  first  program  phase.  This  wide  field  of  view  (15  x  20 
degrees  instantaneous),  conventional,  optics  HUD  has 
since  been  transitioned  to  the  F-16C/D  production 
aircraft.  Symbology  is  stroke-written  with  raster  growth 
capability.  The  AFTI  requirement  for  the  wide  FOV  was 
to  provide  required  flight  data,  including  predictive 
weapon-delivery  information,  while  maintaining  high 
readability  with  low-clutter  perception  to  the  pilot. 

In  the  low-altitude,  automated  maneuvering  attack 
environment,  the  pilot  must  be  given  predictive 
information  as  to  the  aircraft  trajectory  and  release 
conditions  as  well  as  the  weapon  aiming  and  delivery 
solution.  Figure  19  shows  HUD  symbology  for  AMAS 
attack  profiles.  The  predictive  profile  is  displayed 
towards  the  left  side  of  the  HUDt  the  attack  symbology  is 


displayed  in  the  center.  The  predictive  display  shows  the 
predicted  flight  trajectory  (start,  current  position,  apex, 
release)  and  weapon  release  conditions  (dive  angle, 
release,  and  recovery  altitudes).  The  attack  symbology 
displays  the  load  factor  and  bank  angle,  both  commanded 
and  actual,  to  achieve  the  desired  release  conditions. 
The  display  allows  manual  steering,  as  well  as  automated, 
for  the  maneuvering  weapon  deliveries.  Symbology  is  also 
presented  to  show  impending,  minimum-set  altitude  and 
auto  fly-up  (air-to-ground)  or  breakaway  (air-to-air) 
maneuvers.  The  HUD  symbology  was  developed  with 
extensive  pilot  Involvement  and  simulator  evaluation. 
Display  clutter  and  symbology  stability  are  design 
problems  requiring  careful  attention.  Flight  testing  is 
validating  the  utility  of  the  predictive  displays. 
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Figure  It  Predictive  Dtapley  Symbology 


Multifunction  Display  Set  (MFD*) 

The  two  monochrome  MFDs  which  are  common  to 
the  F-16C/D,  but  are  raised  high  in  the  instrument  panel 
to  keep  a  minimum  eye  shift  from  "heed-out”  to  "head  in" 
the  cockpit.  They  can  be  interchangeebly  used  for  redar, 
FUR,  threat  warning,  and  digital  map  (monochrome) 
video  as  well  as,  for  system  status  and  control.  Pilot 
interface  ia  accomplished  through  the  20  bezel-mounted 
switches,  hands-on-stick  controller  and  throttle- 
controller  switches,  and  voice  command. 

Color  Display 

The  lower  display  serves  as  the  Tactical 
Management  Display  and  as  a  back-up  to  other  primary 
displays.  Situational  awareness  is  a  key  design  thrust  for 
pilot  assistance  while  operating  in  the  low-altitude,  high¬ 
speed,  and  high-workload  environment.  Although  the  film 
reader  map  was  useful  while  operating  on  the  restricted 
test  ranges  at  Edwards  AFB,  the  digital  map  offers  new, 
revolutionary  capabilities,  it  originally  contained  a  film- 
reader,  moving  map  and  has  been  replaced  by  a  digitally- 
generated  map  display.  This  five-inch  color  display  will 
also  be  used  for  evaluation  of  raster  and  stroke-drawn, 
flight  instruments.  It  should  be  noted  that  the  AFTI/F-16 
is  currently  configured  only  for  day,  VFR  flight; 
significant  changes  and  up-grade  of  flight  instruments 
will  be  required  for  night/weather  operations  of  the 
AMAS.  This  color  display  is  also  used  as  a  back-up  for 
clear-text,  fault  reporting  of  the  digital  flight  control 
system.  This  was  required  for  redundancy  considerations 
because  a  single,  programmable,  display  generator  drives 
both  monochrome  MFDs. 


Digital  Terrain  Management  and 
Dtaplif  System  (DTMDS) 

This  system  employs  e  third-generation,  digital  map 
generator  developed  by  the  Harris  Corp.  under  U.S.  Army 
(AVRADA)  sponsorship.  The  objective  is  to  evaluate  the 
accuracy  and  usability  of  Digital  Land  Mass  System 
(DLMS)  data  in  a  tactical-fighter,  aircraft  environment. 

Internal  to  the  digital  map  generator  (DMG), 
multiple  micro- processors  operate  on  a  parallel  data  bus 
with  a  common,  shared  memory.  This  architecture  allows 
growth  to  support  additional  functions,  such  as  terrain- 
following/avoidance.  In  the  AFTl/F-16  AM  AS  config¬ 
uration,  the  Sandia  Inertial  Terrain-Aided  Navigation 
(STTAN)  algorithm  Is  hosted  within  the  DMG  to  provide 
auto-navigation  capability.  The  stored  terrain  data  pro¬ 
vides  elevation  information  for  comparison  with  radar 
altimeter  data  that  SITAN  utilises  to  precisely  locate  the 
aircraft  within  the  map  field.  During  the  AMAS  phase  of 
the  AFTI/F-16  program,  the  digital  map  is  being  eval¬ 
uated  with  respect  to  the  use  of  color,  elevation  shading, 
cultural  features,  scales,  automatic  navigation  accuracy 
and  overall  pilot  interface. 

Interactive  Voice  System 

Another  dimension  to  the  pilot/vehicle  Interface  is 
provided  through  interactive  voice,  i.e.,  voice  command 
and  voice  synthesis  (feedback)  for  communications  with 
aircraft  avionics  systems.  Careful  attention  was  given  in 
designing  hands-on  controllers  for  the  APTVP-Hj 
however,  the  number  of  switches  and  functions  (Figure 
20)  have  reached  the  limit  of  reasonable  operability.  The 
interactive  voice  augments  hands-on  control,  allows 
direct  function  selection  without  page  scrolling  and  menu 
shopping  from  MFDs,  and  provides  critical  feedback 
information  without  bringing  eyes  into  the  cockpit.  In  the 
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The  voice  system  interfaces  with  the  avionics 
subsystems  through  the  multiplex  data  bus  structure. 
Vocabulary  is  very  carefully  chosen  to  be  common  to  the 
subsystem  and  normal  pilot  operation.  Manual  control  is 
available  at  all  times  for  the  voice-accessed  functions. 

Voice  command  was  first  flown  on  AFTI/P-16  in  the 
DFCS  Phase.  Hare,  the  experiment's  objective  was  to 
datermlna  tha  feasibility  of  using  voice  in  the  high-noise 
(up  to  112  dB)  and  g  environments.  This  testing  was  very 
encouraging.  Whila  recognition  rates  needed  to  be 
greatly  improved,  feasibility  was  established.  During 
AMAS  flight  testing,  we  expect  to  see  recognition  rates 
better  than  95  percent,  and  with  near-continuous  speech 
operation  (versus  isolated  word  recognition).  The  systems 
are  still  speaker  dependent  and  require  a  data  cartridge 
to  load  individualised  speech  templates  for  the  given 
vocabulary.  The  voice  experiment  on  AMAS  is  structured 
to  determine  the  utility  of  an  interactive  voice  system  in 
the  cockpit.  Real  measurea  of  workload  reduction  and 
performance  enhancement  are  still  being  addressed. 


STANDARDIZED  AVIONICS  INTEGRATED  FUZING 
(SAIF) 

Tha  SAIF  concept  developed  by  the  Air  Force 
Armament  Laboratory,  Eglin  AFB,  Florida,  allows 
optimisation  of  the  aircraft  weapon  interface  by 
permitting  real-time  weapon  fusing  baaed  on  actual 
release  parameters  and  desired  pattern  size.  On-  board 
AFTI/F-1S  systems  compute  the  necessary  mission  and 
avionic  system  parameters  which  are  then  communicated 
to  the  weapon  through  a  MIL-STD  1760  Interface  to 
achieve  optimum  bomblet  pattern  sise.  This  approach 
minimises  the  pilot's  weapon  management  task,  while  at 
tha  same  time  eliminating  flight  parameter  restrictions 
associated  with  conventional,  fixed,  function-time  fuze 
settings. 

Figure  21  shows  the  sequence  of  events  using  the 
Tactical  Munitions  Dispenser  (TMD).  The  pilot  selects 
the  target  type  on  the  display,  and  the  fire  control 
system  then  uses  the  optimum  bomblet  pattern  density 
for  that  target.  Based  on  aircraft  flight  conditions,  the 
fuse  function  time  is  continuously  computed  and  set  in 
the  fuse  over  the  multiplex  bus. 
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Figure  20  Interactive  Voice  System 

AMAS  conflgu.-Jon  voice  command  is  used  for:  (1)  radio 
channel  and  steerpoint  selection,  (2)  MFD  page  select  and 
control  (radar,  sensor/tracker,  stores  management 
functions),  (3)  data  entry  of  radio  frequency,  destination 
coordinates  and  weapon  release  range  (fire  control 
system),  (4)  pilot  selectable  status  queries  (fuel,  weapon, 
etc.),  checklists,  and  event  advisories  (altitude,  airspeed, 
time-to-go),  and  (5)  system  initiated  warnings,  cautions, 
and  advisories,  which  are  also  synthesized. 
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Figure  21  Standardized  Avionics  Integrated  Fusing 
(SAIF) 


SYSTEM  INTEGRATION 


System  Integration  is  the  key  to  effective  end  pilot- 
ecceptable  com  bet  eutometion  capabilities.  From  the 
beginning,  the  AFTVF-16  development  teem  stressed  the 
importance  of  integration  in  the  hopes  of  achieving  a 
degree  of  synergism.  The  AFT1/F-18  program  is  deeply 
rooted  in  the  philosophy  of  technology  integration,  in 
order  to  credibly  demonstrate  not  only  the  projected 
improvements,  but  also  to  determine  the  practicality  and 
the  limitations  of  emerging  fighter  aircraft  technologies. 
This  integration  philosophy  is  reflected  in  a  formalised 
systems  engineering  approach,  where  top-level,  mission, 
performance  requirements  affect  the  total  design. 
System  specifications  were  progressively  allocated  to 
lower  levels  in  a  traceable  and  controlled  fashion.  The 
design  and  integration  process  was  dynamic  and  highly 
interactive  during  all  stages  of  development.  Design  engi¬ 
neers,  software  engineers,  programmers,  test  engineers, 
specialty  engineers,  and  pilots  participated  fully  in 
evolving  overall  design  and  integration  concepts. 

System  developers  were  given  considerable  freedom 
and  encouragement  to  explore  innovative,  and  sometimes 
controversial,  ideas  in  order  to  achieve  the  broad 
program  objectives.  Throughout  the  design  process, 
major  emphasis  was  focussed  on  end-item  performance, 
safety,  and  pilot  acceptance.  Early  involvement  of  the 
engineering  and  test  communities  proved  invaluable. 

Automated  maneuvering  attack  encompasses 
several  critical  operational  tasks  ranging  from  target 
acquisition,  target  tracking,  command  guidance,  and 
control  steering  through  weapon  delivery.  Each  of  these 
tasks  breaks  down  into  subtasks,  which  are  then 
translated  into  specific  system  design  requirements.  The 
challenge  of  system  Integration  is  to  consider  each  of  the 
unique  task  requirements  in  the  context  of  a  total  system 
which  can  be  realized  in  a  practical  mechanization.  The 
AMAS  integration  effort  is  sharply  focussed  on  control 
laws,  pilot/vehicle  interface,  system  architecture,  sensor 
fusion,  and  safety.  To  further  illustrate  this  point,  the 
AMAS  can  be  viewed  as  a  clasaical,  closed-loop, 
multivariable,  control  problem  where  relative  target 
position  is  the  controlled  parameter  (Figure  4).  External 
disturbances  including  intentional  pilot  blending  and 
sensor  inputs  must  be  accommodated.  Implementing  the 
AMAS  control  loop  in  real-time  has  significant 
implications  on  signal  flow  and  system  integrity. 
Practical  considerations  dictate  a  multibus  architecture 
comprising  many  single-thread  elements  in  conjunction 
with  critical  redundant  functions.  Automatic  system- 
wide  anomaly  detection  and  recovery  is  essential, 
particularly  in  the  low-altitude,  maneuvering  environ¬ 
ment.  Achieving  acceptable  stability  and  accuracy 
becomes  a  major  challenge  considering  the  inherent 
transport  lags  of  multirate/multiprocessor  architecture. 
Por  these  reasons,  system  architecture,  signal  flow,  and 
functional  partitioning  were  major  considerations  in 
achieving  required  performance  relative  to  throughput 
and  system  bandwidth. 

The  AMAS  is  a  software-intensive  design  cutting 
across  several  existing  and  separately-developed  baseline 
avionic  systems.  Achieving  an  integrated  design  required 
extensive  development  and  modification  of  existing 
operational  flight  programs.  The  resulting  mechanization 
maximizes  the  use  of  existing  on-board  computing 
resources,  thereby  alleviating  the  need  for  additional 
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specialized  subsystem  equipment.  With  the  exception  of 
the  Senaor/Tracker,  the  AMAS  design  is  literally  ; 

embedded  flight  control  and  avionic  systems  to  achieve 
fully-  integrated  mission  capabilities. 

I 

The  system  was  initially  implemented  in  a  software 
simulation  to  verify  interface  data  and  operating 
characteristics.  As  the  design  matured,  the  complexity 
and  fidelity  of  the  simulation  modeling  increased.  Many 
times  simulation  efforts  led  to  design  development  and 
definition  from  simulation  software.  An  example  is  the  j 

AMAS  modifications  to  the  fire  control  computer  opera-  i 

tlonal  flight  program  which  were  originally  emulated  in 
the  software  simulator  and  refined  before  the  target 
computer  was  programmed.  Extensive  piloted  simulations 
proved  invaluable  in  evolving  the  AMAS  design  from 
concept  definition  through  final,  integrated,  system 
validation. 

The  AFTI/P-16  Phase  t  DFCS  operational  flight 
program  and  the  P-18  MSIP  avionic  operational  flight 
programs  were  the  baseline  software  for  the  AMAS 
development.  To  ensure  a  coordinated  integration  of  the 
design,  all  system  changes  were  defined  and  documented 
on  a  Design  Change  Request  (DCR)  and  approved  or 
rejected  by  the  Design  Change  Review  Board.  Every 
DCR  required  the  signature  of  each  affected  subsystem 
lead. 


Approved  design  implementations  then  entered  the 
test  cycle  illustrated  in  Figure  22.  The  hotbench 
simulation  integration  and  checkout  Is  the  real  test  of 
whether  the  integration  effort  has  been  successfully 
accomplished.  The  hotbench  is  composed  of  a  high 
fidelity  aircraft  simulation  connected  to  avionics  and 
flight  control  flight  hardware  and  software  as  illustrated 
in  Figure  23.  The  only  equipments  excluded  from  the 
simulation  interface  were  the  central  air  data  computer 
and  the  inertial  navigation  unit.  Engineering  evaluation 
and  checkout  is  accomplished  utilizing  the  actual  flight 
equipment.  The  hotbench  simulation  also  provides  full 
AFTl/F-18  mission  capability  with  a  large  (60  degrees  by 
180  degrees)  color,  visual  scene  for  piiot  evaluation. 


All  system  discrepancy  reporting  is  accomplished  by 
way  of  the  Discrepancy  Report  Form  (DR).  The  reports 
are  logged  into  a  computer,  shared  file  available  on  the 
Electronic  Mail  and  Office  Systems  (EMOS)  for  all  parties 
to  review  and  submit  resolutions  or  changes.  All  system 
DRs  are  reviewed  by  the  System  DR  Board  and  assigned 


to  the  subsystem  It  appropriate.  Flight  taat  and 
confidence  taat  DRs  art  proeaaaad  through  tha  sama 
systam.  This  procaaa  haa  provided  a  machaniam  to  enaure 
that  ayatein  integration  consideration*  ware  given 
appropriate  priorities  and  visibility. 


CONCLUSIONS 


Tha  Integrated  Verification  and  Validation  Phase  of 
testing  la  the  formal,  final  step  before  releasing  the  OFPs 
to  flight  teat.  It  serves  to  verify  system  interfaces, 
operation  and  integrity  management.  The  integrated 
system  teating  encompasses  the  following  major  areas: 


1.  Built-in-Teat  (BIT) 


2.  Manual  PCS  Tests 


3.  Closed- Loop  Response  Tests 


4.  System-Wide  Integrity  Management  Test 
$.  AMAS  Operation  and  Mission  Profiles  Test 


The  on-aircraft  integration  began  by  conducting 
several  verification  tests  to  establish  proper  end-to-end 
continuity  and  electrical  compatibility.  The  total  closed- 
loop  operation  was  investigated  for  sufficient  structural 
gain  margin  by  accomplishing  a  structural  coupling  test. 
Specific  on-aircraft  integration  is  performed  with  each 
new  OFP,  to  assure  proper  operation  of  the  integrated 
system. 


The  AFTI/F-18  Automated  Maneuvering  Attack 
System  has  evolved  through  a  disciplined,  systems- 
engineering  process,  which  emphasized  realistic  combat 
scenarios,  technology  integration,  pilot  utility  and  safety. 
Weapon  delivery  accuracy  and  survivability  will  likely 
diminish  in  a  high-threat  environment,  without  significant 
advances  in  the  practical  uses  of  combat  automation  and 
pilot  situational  awareness.  The  resulting  AMAS  design 
represents  a  crucial  step  towards  the  practical  imple¬ 
mentation  of  combat  automation  technology  in  modern, 
high-performance,  fighter  aircraft.  Central  issues 
addressed  in  the  AMAS  development  include  the  pilot- 
vehicle  interface,  flight  control  and  avionics  integration, 
sensor  fusion,  system  integrity  and  mission  versatility. 
The  AMAS  design  concept  recognizes  both  the  capa¬ 
bilities  and  limitations  of  the  pilot  to  successfully  engage 
and  survive  both  air-to-air  and  air-to-surface  combat. 
The  system  has  the  necessary  provisions  for  blending 
manual  and  automated  control  features  in  a  safe  and 
effective  manner.  Additionally,  the  E-O  Sensor/Tracker 
Set  has  been  tailored  for  multirole-fighter  Application. 
Pilot  acceptance,  effectiveness  and  practicality  have 
been  carefully  considered.  Through  the  process  of  flight 
test,  AFTI/F-18  is  continuing  to  validate  technology 
alternatives  for  improved  mission  effectiveness. 
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ABSTRACT 


This  papar  dasorlbas  a  sansor/traokar  systaa 
designed  to  support  both  air  to  air  and  air  to 
ground  automated  weapon  delivery  at  subsonlo  and 
supersonic  speeds.  The  configuration.  Installation, 
operational  application  and  test  results  are 
discussed.  The  8-12  alcron  sensor,  NdsYAG  laser, 
optics  and  glabals  located  In  the  low  drag 
conforaal  strake  aounted  head  are  described.  A 
separate  processor  located  In  the  aircraft  hosting 
a  1750A  coaputer,  a  video  tracker  and  a  digital 
scan  converter  signal  processor  and  reforaatter  is 
discussed.  Also  discussed  are  the  aircraft 
Interfaces  and  the  sensor/tracker  operating  aodes. 
Pilot  controls  and  displays  are  presented 
eaphaslzlng  interactions  through  the  Multi-Function 
Display  set. 


INTRODUCTION 

The  AFTI/F-16  sensor/ tracker  is  a  saall,  high 
density,  low  drag  coaxial  FLIR/laser  globalled 
system  with  a  sensor  head  that  is  conforaally 
aounted  in  the  strake  of  the  AFTI/F-16  aircraft  to 
provide  accurate  A/A  and  A/G  target  location 
information  to  an  automated  maneuvering  attack 
system.  It  was  developed  using  U.S.  Air  Force, 
General  Dynamics  and  Westinghouse  funds. 
Photographs  of  the  three  system  Line  Replaceable 
Units  (LRUs)  and  a  list  of  their  physical 
characteristics  are  shown  in  Figure  1 .  Illustration 
of  the  conformally  mounted  sensor  head  and  position 
of  the  processor  and  auxllllary  power  supply  are 
shown  in  Figure  2. 

The  low  drag  was  achieved  primarily  with  a 
small  cross-section  and  conformal  mounting,  both  of 
which  set  demanding  packaging  requirements.  Swept 
volume  and  the  large  field  of  regard  were  also 
packaging  drivers.  As  a  result,  the  sensor  head, 
which  rotates  continuously  with  all  of  its 
components,  houses  only  the  gimbals,  IR  sensor, 
laser  and  essential  electronics.  Most  of  the 
processing  is  performed  in  the  processor  that 
contains  a  derivative  of  the  AN/APG-68  radar  1750A 


general  purpose  computer,  a  video  tracker  and  a 
video  signal  processor/reformatter. 

Wind  tunnel  drag  data  for  a  dual  head 
installation  is  shown  in  Figure  3  and  represents  a 
3x  to  7x  reduction  in  the  drag  increment  typical  of 
today's  pylon  mounted  pods.  Further,  the  conformal 
Installation  was  found  to  have  a  negligible  Impact 
on  aircraft  lift  and  stability  characteristics,  and 
does  not  take  up  a  store  station. 

In  addition  to  low  drag,  the  sensor  head 
strake  mount  has  proven  to  be  good  for  boreslght 
control  and  provides  a  broad  field  of  regard 
including  over/under  fuselage  capability  essential 
for  A/A  combat  as  shown  in  Figure  4.  Operationally 
conceived  as  a  dual  head  system  with  hand  over 
capability  to  overcome  fuselage  masking,  a  single 
head  adequately  covers  the  HUD  field  of  view  and 
was  used  during  flight  test  for  reasons  of  cost. 


SYSTEM  DESCRIPTION 

The  general  partitioning  of  the  sensor  head  is 
shown  in  Figure  5.  The  electronics,  FLIR  receiver 
pallet,  and  the  laser  modules  are  accessible  as 
shown  through  covers.  The  FLIR  receiver  pallet  and 
the  laser  separation  provides  good  EMI  shielding. 
The  sensor  head  is  supported  by  bearings  at  the  mid 
and  aft  bulkheads  and  rotates  with  them.  Not  shown 
are  the  covers  and  the  non-rotating  roll  can  shown 
in  the  photograph  in  Figure  1.  Installation  and 
removal  of  the  sensor  head  involves  the  entire 
assembly  and  is  accomplished  quickly. 


FLIR  Section 

The  $-12  micron  FLIR  sensor  design  draws 
heavily  upon  the  current  and  advanced  common  module 
FLIR  components.  It  uses  an  electronically 
multiplexed  Digital  Scan  Converter  (DSC)  in  lieu  of 
the  conventional  LED/TV  camera  method.  Dual  thermal 
references  are  used  for  automatic  gain  and  level 
equalization.  The  FLIR  also  features  Automatic  Low 
Frequency  Gain  Limiting  (ALFGL),  Automatic  Gain 


Control  (AGC),  line/line  Interpolation  capability, 
whlte/black  hot  display,  electronic  zoos  and 
linearity  correction  using  a  scan  position  sensor. 
The  detector  array  is  read  out  vertically  as  the 
image  is  scanned  across  the  array  horizontally  in 
1/60  second.  The  second  bar  of  the  wig  wag  scan  is 
used  tor  interlace  to  fora  the  30  Hz  fraae  rate. 
Each  detector  is  displayed  twice  per  fraae. 

The  staggered  120  eleaent  HgCdTe  detector 
array  was  supplied  by  New  England  Research 
Corporation.  A  specific  cold  shield  design  was  used 
to  Increase  the  detector  sensitivity. 

The  general  layout  of  the  FLIR  optics  chain  is 
shown  in  Figure  6.  It  is  composed  of  ZnSe,  ZnS,  Ge, 
and  AMTIR  elements.  Thermal  design  in  the  optical 
areas  was  important  to  alnialze  transmission 
losses.  The  FLIR  optical  and  laser  areas,  including 
the  turret,  are  pressurized  for  reasons  of 
cleanliness  and  cooling.  Three  fields  of  view  of 
5.*,  2.4  and  1.2  degrees  diagonally  operate  through 
apertures  of  1.3,  3.0  and  5.6  inches  respectively. 
Automatic  focusing  Is  used  to  compensate  for  field 
of  view  changes,  range  and  temperature.  In-flight 
verification  of  FLIR/laser  boreslght  is  provided  by 
a  boreslght  projector.  Optical  alignment  with  the 
aircraft  boreslght  Is  maintained  by  precision 
mechanical  mounting.  Boreslght  corrections  are  made 
via  sensor/tracker  software  thus  eliminating 
hardware  preflight  boreslght  operations. 


Laser 

The  sensor/tracker  uses  a  laser  for  accurate 
air  to  air  and  at"  to  ground  target  ranging.  A 
Nll-quellfled  1.06  micron  Neodymium  TAG  AN/AVQ-25 
(PAVE  SPIKE)  laser  designator  transmitter  is  used 
unchanged.  Its  power  supply  has  been  repackaged  to 
fit  the  allocated  space.  The  laser  energy  out  the 
window  Is  a  nominal  80  mill! joules/ pulse.  An 
AN/GVS-5  silicon  avalanche  quad  detector  serves  as 
the  receiver.  It  operates  on  a  first  or  last  pulse 
logic. 

A  narrow  divergence  laser  beam  performs 
air  to  surface  ranging  wmle  a  wider  divergence 
beam  is  used  for  air  to  air  ranging.  The  laser 
operates  at  a  15  Hz  pulse  repetition  frequency  at  a 
15  nanosecond  pulse  width.  Provisions  are 
currently  underway  to  incorporate  laser  coding  for 
target  designation. 


Gimbal/Servo  Characteristics 


the  system  provides  the  desired  LOS  isolation  from 
flight-induced  perturbations  while  allowing 
high-rate  target  tracking.  Inputs  from  the  Target 
State  Estimator  (TSE),  aircraft  Inertial  navigation 
system,  and  sensor/tracker  gimbals  are  used  to 
generate  rate-aiding  commands  to  ease  the  target 
tracking  task.  A  continuous  derotation  loop  is 
mechanized  to  provide  either  a  "sky-up",  "horizon 
natural"  or  "track-up"  Image  orientation  on  the 
cockpit  display. 

Extensive  rigid  and  flexible  body  model 
analyses  and  tests  were  performed  to  define  and 
control  gimbal  resonances  in  order  to  achieve 
required  LOS  stabilization  values.  Also,  the  line 
of  sight  control  laws  were  exercised  via  computer 
simulations  to  ensure  optimal  use  of  roll  drive 
torque  and  soooth  tracking  through  the  gimbal  pole. 


Video  Tracker 

The  multi-mode  video  tracker  uses  unformatted 
digital  video  for  maximum  sensitivity.  Tracker 
signal  flow  for  the  various  modes  Is  depicted  in 
Figure  ?.  Target  detection  and  angle  tracking 
logic  was  based  on  previous  Uestinghouse  designs. 
Video  tracker  algorithms  form  a  separate  set  of 
software  resident  in  the  Intel  8086  microprocessor 
contained  within  LRU  1 .  Because  the  detector  array 
is  contiguous,  each  video  field  used  by  the  tracker 
contains  a  complete  scene  image  so  that  a  smooth 
tracking  capability  is  maintained. 

Air  to  surface  tracking  operations  always 
begin  by  using  a  digital  area  correlation  track 
technique.  Attainment  of  this  "scene  track*  state 
then  permits  automatic  entry  into  a  discrete  target 
track  submode  with  its  greater  accuracy  and 
automatic  target  centering  capability.  This  Is  the 
"target  track"  3tate  of  air  to  ground  operations. 
If  refinement  of  the  track  point  is  desired.  Inputs 
to  the  cursor  control  temporarily  force  the 
sensor/tracker  into  the  "track  adjust"  mode.  The 
track  adjust  mode  may  be  either  scene  track  adjust 
or  target  track  adjust.  In  either  case,  it  permits 
the  target  being  tracked  to  move  away  from  the 
center  of  the  field  of  view  so  that  a  new  target 
can  be  centered  and  locked  on  when  leaving  track 
adjust. 

Air  to  air  tracking  uses  a  digital  centroid 
track  technique  with  automatic  target  detection  and 
centering.  A  point  track  sub-mode  permits 
aquisltlon  and  tracking  of  long  range  or  small 
air  to  air  targets. 


Gimbal  rate  commands  are  derived  from  pointing 
commands  in  tne  cue  mode  or  from  tracker  error 
signals  in  the  track  modes.  They  are  fed  to  the 
servo  subsystem  to  direct  the  sensor/tracker  line 
of  sight  (LOS)  via  the  three  axis  gimbal  set.  The 
inner  azimuth  axis,  stable  body  and  gimballed 
mirror  with  feed-forward  acceleration  aiding,  is 
carried  on  the  elevation  yoke.  Az  and  El  (and 
turret)  gimbals,  in  turn,  ride  on  the  roll  axis  to 
yield  the  large  angular  field  of  regard.  Azimuth 
travel  of  *8  degrees,  elevation  travel  of  *160 
degrees  and  continuous  roll  capability  produce  the 
♦120  degrees  unvignetted  field  of  regard.  Together 


Target  State  Estimator 


The  sen3or/tracker  includes  a  software- 
implemented  Kalman  filter  resident  in  the 
1750A  general  purrjose  computer  within  LRU  1.  This 
Target  State  Estimator  (TSE)  is  derived  from  the 
AN/APG-68  radar  TSE.  The  sensor/tracker  TSE  runs 
at  a  j0  Hz  rate. 


The  function  of  the  TSE  within  the  automated 
maneuvering  attack  system  is  depicted  in  Figure  8. 
The  TSE  fuses  time  tagged  range  and  range  rate  data 
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*lth  laser  range  and  sensor  head  line  of  sight 
ieasureaem.s.  Estimated  target  position  output  of 
he  TSE  is  provided  to  the  AMAS  director  algorithms 
n  platform  coordinates  to  reduce  own ship- induced 
utput  data  variations  entering  the  flight  control 
ommand  loop.  In  air  to  air  operations,  TSE 
'Utputs  are  target  relative  position,  Inertial 
elocity,  and  acceleration.  For  air  to  ground 
racking,  only  position  and  velocity  are  provided. 


NTERFACE  AMD  OPERATIONS 

The  sensor/tracker  is  functionally  Integrated 
1th  the  AFTI/F-16  mission  avionics  suite  as  shown 
n  Figure  9.  Communication  between  the 
ensor/tracker  set  and  the  aircraft  avionics  is 
chieved  primarily  over  the  MIL-STD  1553  (A  Mux) 
us.  In  adddition  to  this  bus  interface,  there  are 
our  discrete  signals,  three  INU  synchro  signals, 
n  RS-170  video  coax  and  aircraft  power  lines. 

The  sensor/tracker's  automated  operations  are 

nitiated  when  the  pilot  selects  his  AFTI/F-16 

eapons  system  mode.  The  Fire  Control  Computer 
FCC)  initiates  the  sensor/tracker ,  runs  its  built 
n  test,  and  sets  its  operational  modes.  As  shown 
n  Figure  10,  the  FCC  cues  the  sensor/tracker  to 
cqulre  and  track  a  target  using  the  appropriate 
MU,  HUD,  radar,  or  helmet  mounted  sight  (HMS) 
ommand.  Target  acquisition  and  tracking  is 
utomated  via  the  video  tracker  and  automatic 

arget  centering  features  are  available  in  either 
lr  to  air  or  air  to  ground  modes.  Target  hand-back 
s  also  readily  achievable  between  the 
•naor/tracker  and  the  cueing  sensors.  Once 

-acklng  is  established,  the  sensor/tracker 
•livers  the  Kalman  filtered  target  state  estimate 
>  the  FCC. 

Figure  11  shows  the  operating  modes  of  the 
msor/tracker  system.  Correct  mode  selection 
ipends  primarily  on  the  current  FCC  sensor  manager 
:ate  and  Involves  a  minimum  of  pilot  switch 
:tlons.  Automatic  task-tailored  mode  selection  was 
rcessary  to  optimize  one  man  weapon  delivery.  An 
ldltlonal  sensor/ tracker  mode  not  listed  on  Figure 
I  is  a  special  simulation  test  mode  for  field  or 
wfllght  evaluation  of  the  TSE.  This  mode  permits 
>eratlon  of  the  TSE  software  with  the  head  in  the 
.owed  position  or  even  with  the  head  LRU  removed 
•cm  the  aircraft.  In  this  mode,  the  processor 
isponds  to  mode  control  and  some  sensor  control 
•amends  even  when  the  head  LRU  is  absent. 

Pilot  Interface  to  the  sensor/ tracker  is 
•signed  so  that  the  critical  weapon  delivery 
slated  functions  are  located  on  hands-on 
•ntrollers  to  provide  quick  reaction  Inputs.  The 
iportant  tank  of  slewing  the  sensor/tracker  line 
Sight  is  accomplished  using  the  cursor 
•ntroller  on  the  throttle.  Target  designation  and 
•turn  to  search  actions  are  controlled  with  the 
lot's  right  thumb  on  a  switch  located  on  the 
.destick  controller.  A  display  of  Interest  switch 
i  also  located  on  the  sidestick  controller  to 
.low  selection  of  the  desired  sensor  display.  A 
•inky"  switch  on  the  sidestick  controller  allows 
le  pilot  to  manually  change  sensor/tracker  fields 


of  view.  Manual  laser  fire  is  accomplished  by 
pulling  the  gun  trigger  on  the  control  stick. 

Less  critical  sensor/tracker  control 
functions  are  located  in  the  forward  area  of  the 
cockpit,  as  are  the  primary  sensor/tracker 
displays.  The  majority  of  the  sensor/tracker 
controls  and  displays  are  provided  to  the  pilot  by 
means  of  either  of  the  two  4-inch  CRT  multifunction 
displays  (MFDs)  located  high  on  the  forward 
instrument  panel.  There  are  two  basic  MFD  formats 
for  the  sensor/tracker,  the  base  page  and  the 
control  page.  The  base  page,  shown  in  Figure  12, 
contains  mode  annunciation,  image  derotation  scheme 
selection,  field  of  view  indication  and  back-up 
selection,  video  polarity  selection,  cursor  zero 
selection,  aimpolnt  indication,  slant  range 
indication,  time  to  release  readout,  gain  control, 
and  laser  arming  status.  The  control  page,  shown  in 
Figure  13,  permits  entry  of  engineering  data  words, 
video  level  control,  focus  trim  and  boresight 
corrections.  Both  MFD  pages  can  display 
sensor/tracker  video  and  symbology  as  well  as  the 
alphanumeric  information  discussed  above.  Certain 
sensor/tracker  displays  are  also  available  through 
the  HUD.  During  air  to  ground  tracking  operations, 
a  crosshair  is  displayed  over  the  target  on  the 
HUD.  A  small  flashing  "L"  is  displayed  on  the  HUD 
when  the  laser  i:-  firing. 


TEST  RESULTS  AND  CONCLUSIONS 

Uestinghouse  delivered  the  complete, 
flightworthy  sensor/tracker  equipment  to  General 
Dynamics  in  November  1984  for  avionics  system 
Integration  and  ground  testing.  This  activity  was 
completed  in  early  April  1985  and  the  system 
delivered  to  Edwards  AFB  for  aircraft  installation 
and  checkout.  The  first  sensor/tracker  flight 
occured  on  24  April  1985.  From  first  flight  until 
the  end  of  1985,  the  sensor/tracker  was  available 
to  support  3«  of  the  60  AFTI/F-16  flights.  At  the 
end  of  1935,  the  sensor/tracker  development  had 
reached  the  point  where  the  system  could  fully 
support  coupled  automated  bombing  deliveries.  Air 
to  air  sensor/tracker  capabilities  have  not  yet 
been  thoroughly  tested  as  of  this  writing. 

Delays  in  maturing  the  sensor/tracker  system 
during  this  period  to  a  fully  operational  state  can 
be  attributed  to  two  broad  classes  of  problems:  (1) 
aircraft  interface,  and  (2)  sensor/tracker 
reliability  and  performance.  Interface  problems 
tended  to  cue  the  sensor/tracker  to  the  wrong 
location  or  to  prevent  accurate  control  of  the 
sensor/tracker  line  of  sight.  Fire  control  computer 
cueing  logic  errors,  cursor  control  shortcomings, 
and  boresight  inaccuracies  in  the  radar,  HUD  and 
helmet  mounted  sight  are  examples  of  the  interface 
problems  that  had  to  be  overcome. 

Overall  reliability  of  the  sensor/ tracker 
system  has  proved  better  than  expected  of  a  new 
FLIR  design.  However,  because  it  is  a  one  of  a  kind 
unit  with  a  very  limited  spares  pool,  hardware 
failures  inevitably  resulted  in  some  down  time.  The 
test  history  shows  the  Digital  Scan  Converter  (DSC) 
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to  have  the  lowest  subsystem  reliability  caused 
mostly  by  mounting  failures  of  the  leadless  chip 
carriers  on  the  printed  circuit  boards.  Several  DSC 
component  failures  and  a  board  loss  have  also  been 
experienced.  Additionally,  the  Interface  of  the  DSC 
and  its  supportablllty  have  either  directly  or 
Indirectly  accounted  for  a  significant  amount  of 
down  time.  The  DSC  used  is  a  modified  preproduction 
unit  built  for  the  Army  Helicopter  Improvement 
Program.  A  recent  acquisition  of  a  similar  set  of 
boards,  the  growth  of  support  capability  and  a 
reworking  of  the  LCC  mounting  should  significantly 
alleviate  these  problems. 

Failures  in  the  early  part  of  the  program  also 
included  significant  detector  artifact  problems  and 
detector  cooling  problems.  Considerable  downtime 
was  experienced  when  engineering  design  changes 
were  made  to  extend  or  improve  performance.  More 
recently,  several  power  supplies  had  component 
failures. 

The  performance  of  the  FLIR/ laser  system  as 
originally  delivered  to  the  aircraft  was  barely 
adequate  to  support  automated  bombing  at 
operationally  relevant  ranges.  Performance 
improvements  incorporated  early  in  the  course  of 
flight  testing  have  brought  tracking  performance  up 
to  design  prediction  levels.  These  improvements  in¬ 
clude  a  new  thermal  reference  assembly,  a  revised 
target  detection  filtering  technique,  use  of  8-bit 
histograms  in  the  tracker  versus  the  original 
6-bit,  and  adjustment  of  tracking  threshold 
settings.  A  laser  receiver  modification  was  also 
necessary  to  achieve  acceptable  laser  range 
performance. 


The  flight  test  results  ar^  positive. 
Controlled  tests  revealed  no  adverse  coupling 
effects.  Dero  servo  elasticity  tests  were  performed 
at  maximum  delivery  airspeed  without  adverse 
effects.  Most  Importantly,  non  wings  level 
automated  bomb  deliveries  with  Improved 
sensor/tracker  tracking  and  laser  ranging  were 
successfully  accomplished  in  late  1985. 


To  bring  the  system  up  to  operational 
capability,  the  pilot  workload  needs  to  be 
decreased.  This  will  be  readily  accomplished  by 
eliminating  aircraft  range  interface  problems, 
improving  cursor  rates  and  incorporating 
sensor/tracker  Improvements.  These  improvements 
include  adding  adaptive  gate  slxing,  and  minimizing 
pitch  coupling  into  the  gimbals.  With  the 
operational  workload  reduced,  a  continued 
successful  flight  demonstration  and  development  is 
indicated.  This  will  provide  the  technical  and 
operational  design  baseline  needed  to  transition 
this  or  follow  on  sensor/tracker  development 
efforts  with  maximum  confidence  and  minimi* 
technical  risk. 

In  summary,  the  FLIR  sensor/tracker  program 
has  been  a  successful  sensor  development  and  system 
integration  effort.  The  equipment,  with  its  early 
improvements,  has  fulfilled  its  air  to  surface  test 
objectives  and  performed  well  in  flight.  It  has 
also  pointed  the  way  to  further  refinements  in  the 
pilot-vehicle  interface.  The  sensor/tracker's  air 
to  air  testing,  begun  in  late  1985  will  be  contin¬ 
uing  throughout  the  remainder  of  FT  86. 


Fig  2.  Sensor /Tracker  Aircraft  Installation 
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Fig  3.  Low  Drag  Conforaal  Strake  Installation 
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Ftg  4.  Sensor /Tracker  Field  of  Regard 


Fig  5.  Senaor/Tracker  Head  Partitioning 


Fig  6.  FLIR  Section  Components 
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AMAS  GUIDANCE  AND  CONTROL 
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ABSTRACT 

The  guidance  and  control  for  the  AFTI/F-16 
automated  Maneuvering  Attack  System  (AMAS)  uses  a 
nultimode  distributed  processing  network  to  perform  the 
•asic  task  of  steering  the  aircraft  to  a  continuously 
omputed  weapon  delivery  condition.  The  major 
unctional  elements  of  this  system  are  target-state 
stimation,  weapon-delivery  solution  computation,  and 
light-path  control.  These  elements  form  a  closed-loop, 
lynamic  system  with  the  attendant  issues  of  stability, 
.ccuracy  and  transient  response.  AMAS  is  a  highly 
ntegrated,  complex  system  and  this  is  reflected  in  the 
ruidance  and  control  algorithms.  Both  aerial  gunnery  and 
■ombing  modes  are  supported  by  the  use  of  various 
argeting  options  and  full-pilot  blending  and  override.  In 
.ddition  to  the  basic  weapon  delivery  system,  a  radar- 
Jtlmeter-driven  autopilot  mode  is  provided  to  allow  the 
>ilot  more  time  for  targeting  and  monitoring  tasks. 


SYSTEM  OVERVIEW 

The  AFTI/F-16  Automated  Maneuvering  Attack 
ystem  is  a  fully  integrated,  tactical,  weapon  delivery 
ystem  that  addresses  all  phases  of  the  terminal  attack 
tission.  For  bombing,  this  includes  automated  ingress 
teering,  real-time  target  acquisition  and  tracking, 
reapon  delivery  and  egress.  For  aerial  gunnery,  it  covers 
arget  acquisition  and  tracking,  terminal  steering  and 
reakaway.  Comprehensive  system  health  monitoring  and 
ollision  avoidance  is  active  at  all  times. 

The  closed-loop  guidance  and  control  system 
rovldes  the  necessary  processing  to  accomplish  target- 
tate  estimation,  steering  command  generation  and 
light-path  control.  These  functions  are  partitioned  into 
hree  major  subsystems  on  the  aircraft.  Target  tracking 
nd  target-state  estimation  is  primarily  performed  by  the 
dvanced  AFTI/F-16  Sensor/Tracker  Set  (STS).  Steering 
ommands  are  computed  in  the  Fire  Control  Computer 
FCC)  based  on  STS  data  and  ownship  state  data.  Flight¬ 
ed!)  control  is  accomplished  by  the  Flight  Control 
ystem  (FCS).  All  signals  between  subsystems  are 
arried  by  a  MIL-STD-1553  multiplexed  data  bus.  Figure 
depicts  this  arrangement.  While  the  bombing  and 
unnery  systems  are  conceptually  similar,  they  are  quite 
ifferent  in  practice,  and  will  therefore  be  described 
eparately. 

The  AFTI/F-16  STS  is  a  conformally-mounted,  high- 
ield-of-regard  electro-optical  (EO)  sensor.  This  system 
mploys  an  infrared  detector  for  angular  measurements, 
cloeed-loop  video  autotracker  and  a  laser  ranger. 
arget-state  estimation  is  performed  by  a  9-state 
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Figure  1  AMAS  Outer  Loop  Signal  Flow 

Kalman  filter,  driven  by  video-tracker  errors,  and 
augmented  by  ownship  velocity  and  acceleration  terms. 
The  range  channel  can  be  driven  by  the  laser  ranger,  by 
the  FCC  (during  acquisition),  or  by  the  fire  control  radar 
(FCR).  Estimation  is  performed  at  a  30-Hertz  rate 
utilizing  an  inertially  stabilized  reference  frame. 

The  FCC  is  a  general-purpose  computer  that 
performs  the  basic  tasks  associated  with  navigation, 
fixtaking,  and  weapon-delivery  solution.  The  FCC 
accepts  target-state  data  from  the  STS  (and  other 
sources  during  bombing)  as  the  primary  inputs  to  its 
AMAS  steering  computations.  The  FCC  relates  target 
state  with  ownship  state  to  derive  various  steering 
commands  depending  upon  the  steering  mode  in  effect. 
When  the  low-altitude  radar  autopilot  (LA RAP)  is  active, 
the  FCC  conditions  above-ground-level  (AGL)  altitude 
data  from  the  radar  altimeter  (RALT)  and  the  forward- 
looking  radar,  performing  source  blending  and  antenna 
control. 

Flight-path  control  is  performed  in  the  FCS  by 
nulling  the  steering  commands  from  the  FCC. 
Conditioning  of  the  various  steering  signals  is 
accomplished  prior  to  summing  them  into  the  basic 
stability  and  control  augmentation  control  laws.  Pilot 
blending  and  override  is  also  accomplished  by  the  FCS.  In 
general,  the  automated  system  has  the  full-command 
authority  in  all  axes.  Structural  limiting  and  anti¬ 
departure  COfititsl  is  performed  by  the  FCS. 


AMAS  BOMBING  SYSTEM 

AMAS  can  perform  two  basic  types  of  bombing 
deliveries.  The  first  is  a  constant-altitude,  straight-in, 
wings-level  (WL)  delivery.  In  this  mode,  the  automated 
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system  provides  lateral  steering  to  null  bomb  miss 
distance  while  maintaining  aircraft  altitude.  Any 
vertical  maneuvering  is  performed  by  the  pilot.  The 
second  delivery  option,  and  the  one  achieved  by  default, 
performs  a  high-G,  non- wings- level  (NWL)  turning 
delivery  as  depicted  in  Figure  2. 


Figure  2  NWL  Bombing  Delivery 

The  AMAS  bombing  scenario  can  be  considered  in 
three  parts.  These  parts  correspond  to  three  phases  of  the 
attack  scenario,  each  of  which  requires  a  different 
steering  algorithm.  In  the  first  mission  phase,  ingress, 
the  system  is  steering  toward  a  computed  transition  point 
at  which  terminal  steering  will  be  initiated.  At  the 
transition  point,  terminal  steering  is  invoked  to  steer  the 
aircraft  to  the  weapon-release  point.  Following  the 
delivery,  the  egress  phase  is  entered;  a  graceful 
transition  away  from  the  target  area  is  performed  in  this 
phase.  During  the  terminal  phase,  the  type  of  steering 
algorithm  depends  upon  whether  a  WL  or  NWL  delivery  is 
being  flown. 

Targeting  for  AMAS  bombing  can  be  accomplished 
in  two  ways.  To  ensure  highest  accuracy,  the  STS  should 
be  locked  onto  the  designated  target.  Initial  cueing  of 
the  STS  can  be  accomplished  using  preplanned  inertial 
coordinates,  the  fire  control  radar,  or  the  helmet- 
mounted  sight.  Once  the  target  is  locked  up,  the  pilot 
can  refine  the  track  point  by  observing  target  video.  In 
lieu  of  STS  tracking,  the  bombing  system  will  operate 
from  inertial  extrapolation  of  target  position. 

The  characteristics  of  a  NWL  bombing  solution 
allows  two  problem  approaches.  A  spherical  solution  set 
exists  (shown  in  Figure  3)  around  the  aimpoint  which  is 
displaced  from  the  target  by  approximately  the  bomb 
gravity  drop  during  its  tlme-of-fall.  At  release,  the  bomb 
velocity  vector  must  be  directed  towards  the  aimpoint. 
This  implies  that  the  range  to  the  aimpoint  at  release 
must  be  tangent  to  the  aircraft  flight  path.  Figure  4 
depicts  a  two-dimensional  view  of  the  NWL  bombing 
geometry.  A  unique  solution  exists  for  a  given  range. 


1)  AIM  POINT  DISPLACED  FROM  TARGET 
BY  GRAVITY  DROP 

2)  VELOCITY  VECTOR  IS  DIRECTED 
TOWARDS  AIM  POINT  AT  RELEASE 

Figure  3  Bombing  Solution  Set 
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Figure  4  NWL  Bombing  Solution  Geometry 

velocity,  and  target  bearing  if  one  unknown,  either 
release  range  or  turn  radius,  is  assumed.  The  first 
solution  of  the  NWL  guidance  problem  assumes  aircraft 
load  factor  (and  therefore  turn  radius)  as  the  independent 
variable.  There  is  then  only  one  tangent  to  the  flight 
path  containing  the  aimpoint  and  it  defines  the  release 
range,  in  this  approach,  roll  attitude  is  the  only  aircraft 
state  requiring  control  in  order  to  maintain  the  turning 
plane  orientation.  The  second  solution  of  the  NWL 
guidance  problem  assumes  release  range  as  the 
independent  variable.  With  this  approach,  there  is  only 
one  turn  radius  (load  factor)  which  intersects  the  release 
range  with  a  tangent  line  drawn  from  the  target.  Both 
load  factor  and  roll  attitude  must  be  controlled  to 
maintain  the  proper  turning  plane.  Both  of  these 
approaches  were  designed  and  simulated  during  AMAS 
development.  The  second  method  --edetermined  release 
range,  was  selected  for  implementation. 

The  computation  of  the  NWL  steering  algorithm  is 
based  on  an  iterative  process.  The  basic  geometry  of  the 
NWL  guidance  problem  is  shown  in  Figure  5.  The  inputs 
to  the  algorithm  include  the  aircraft  velocity  vector, 
acceleration  vector,  target  range  vector,  wind,  and  the 
preselected  release  range.  An  aimpoint  is  determined 
above  the  target  and  a  vector  (Ra)  is  defined  from  the 
aircraft  to  the  aimpoint.  This  vector  and  the  aircraft 
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Normally,  extrapolated  aircraft  states  are  used  as 
inputs  to  the  ballistic  trajectory  computation.  The 
solution  converges  quite  quickly,  however,  and  analysis 
has  shown  that  further  attempts  to  refine  the  steering 
commands  during  the  last  second  of  the  delivery  do  not 
result  in  more  accurate  deliveries.  At  one  second  time- 
to-go,  the  steering  commands  are  frozen  and  actual 
aircraft  states  are  used  as  inputs  to  the  ballistics 
calculations.  Time-to-go  is  then  computed  using  the  rate 
of  change  of  the  predicted  miss  distance,  and  the  weapon 
is  dropped  when  the  miss  distance  along  the  bomb  track 
reaches  zero. 
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Figure  S  NWL  Bombing  Geometry 

velocity  vector  define  the  turning  plane.  The  point  in  this 
plane  which  meets  the  selected  release  range  is  the 
release  point.  A  desired  acceleration  vector  that  will 
point  the  aircraft  velocity  directly  at  the  aimpoint  when 
the  aircraft  is  at  the  release  point  is  computed.  The 
time-to-go  to  the  release  point  is  calculated  and  the 
aircraft  flight  path  is  projected  over  the  time-to-go  to 
the  release  point  giving  a  release  velocity  vector  and 
altitude  above  the  target.  A  ballistic  trajectory 
Integration  routine  is  then  used  to  compute  the  ground 
impact  point  and  the  miss  distance  is  determined.  Based 
upon  the  miss  distance,  the  aimpoint  is  adjusted  through  a 
rate-limited  feedback  path  and  the  process  is  repeated  as 
shown  in  Figure  6. 


The  output  of  the  iterative  loop  described  above  is 
the  desired  aircraft  acceleration  vector.  This  desired 
acceleration  vector  is  matched  with  the  actual 
acceleration  vector  by  commanding  bank  angle  and 
normal  acceleration.  The  desired  acceleration  is  used  by 
the  PCS  directly  to  command  normal  acceleration.  The 
bank  angle  error  is  determined  by  the  cross  product 
between  the  desired  and  actual  acceleration  vectors. 
Since  the  bombing  geometry  is  continuously  computed, 
the  desired  acceleration  will  decrease  as  the  aircraft 
turns  into  the  target,  in  order  to  maintain  a  high  G 
delivery,  the  magnitude  of  the  commanded  acceleration 
is  frozen  when  it  is  determined  that  the  steering  has 
converged  (i.e.,  commanded  acceleration  close  to  actual 
acceleration). 

The  FCS  interface  for  NWL  bombing  consists  of  roll 
attitude  errors  and  normal  acceleration  commands.  The 
roll  attitude  error  is  limited,  blended  with  any  manual 
pilot  commands  and  fed  into  the  roll  rate  feedback  path 
of  the  inner-loop  control  laws.  The  normal  acceleration 
command  drives  both  the  G  and  pitch  rate  command  path 
in  the  longitudinal  inner  loop.  To  avoid  excessive  altitude 
variation  during  the  NWL  steering  transition  (due  to  rapid 
G  onset),  the  acceleration  command  is  conditioned  as  a 
function  of  roll-attitude  error  to  provide  a  smoother 
transition  (see  Figure  7). 


Figure  7  NWL  G  Command-Blending  Logic 

The  tactical  benefits  derived  from  a  NWL  weapon 
delivery  largely  depend  on  maintaining  a  high  turn  rate 
throughout  the  delivery.  Since  the  target  range  and 
bearing  are  important  parameters  in  determining  the  turn 
rate  required,  careful  setup  is  required  for  a  successful 
NWL  attack  as  shown  in  Figure  8.  Since  one  of  the  major 
AMAS  goals  was  to  reduce  pilot  guidance  workload,  an 
automated  ingress  steering  function  was  designed.  This 
function  provides  azimuth  steering  commands  to  assure  a 
successful  high-G  NWL  attack  from  arbitrary  initial 
geometries  (including  reattack  steering  following  weapon 
Figure  •  NWL  System  Equation  Flow  delivery). 
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Figure  8  NWL  Setup  Problems 

The  operation  of  the  ingress  steering  function 
depends  upon  the  aircraft  position  relative  to  the  target. 
The  region  around  the  target  is  divided  into  three  zones, 
shown  two-dimensionaUy  in  Figure  9.  The  sizing  of  these 
zones  is  determined  by  the  preset  release  range  and  the 
minimum  turn  radius  (a  function  of  velocity  and 
maximum  G  level).  Within  zone  A  the  aircraft  is  clearly 
too  close  to  the  target,  in  this  case,  the  Ingress  steering 
function  performs  a  check  turn  to  steer  away  from  the 
target.  The  zone  B-C  boundary  represents  the  transition 
point  from  ingress  steering  to  NWL  steering,  if  the 
aircraft  intercepts  zone  B  with  a  90-degree  bearing  to 
the  target,  it  can  theoretically  perform  a  max-G  turn  to 
the  release  point.  Zone  C  steering  then  drives  the 
aircraft  toward  this  boundary.  in  reality,  it  is  not 
practical  to  drive  to  a  90-degree  bearing.  Aircraft 
response  time  and  variations  in  flight  condition  during  the 
delivery  require  that  the  bearing  be  somewhat  less  than 
90  degrees.  The  azimuth  steering  error  is  determined  by 
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Figure  9  Steering  Zone  Geometry 


Within  zone  B  it  may  still  be  possible  to  transition 
to  NWL  steering  if  the  target  bearing  is  small  enough. 


The  maximum  target  bearing  for  the  current  aircraft 
conditions  is  given  as 

sin_1((RA2  -  Rr2)/2RaRr), 

if  the  actual  bearing  is  less  than  the  computed 
maximum,  the  system  will  transition  to  NWL  steering.  If 
the  actual  bearing  is  too  large,  the  system  will  attempt 
to  salvage  the  delivery  by  automatically  decreasing  the 
weapon  release  range  until  a  delivery  can  be  achieved  or 
until  the  minimum  release  range  (3000  ft)  is  reached.  If 
no  NWL  delivery  can  be  realized,  a  check  turn  is 
executed.  The  type  of  check  turn  performed  depends  on 
the  target  bearing  when  the  check  turn  is  initiated. 
Figure  10  shows  the  geometry  of  the  check-turn  options. 
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Figure  10  Ingress  Steering  Check  Turn  Options 


Since  the  automated  ingress-steering  function  only 
provides  lateral  guidance,  a  separate  function  is  provided 
for  altitude  control.  This  system,  referred  to  as  the  Low- 
Altitude  Radar  Autopilot  (LARAP),  provides  a  basic 
altitude  hold  function  using  AGL  altitude  and  altitude- 
rate-data  provided  by  either  the  radar  altimeter  or 
forward-looking  radar.  A  simplified  block  diagram  of  the 
LARAP  control  law  is  shown  in  Figure  11.  At  engage¬ 
ment  the  current  aircraft  AGL  altitude  is  sampled  and 
used  as  the  reference  altitude  until  LARAP  is  reengaged. 
The  altitude  error  along  with  altitude  rate  is  summed 
with  the  steady  state  G's  required  for  the  current  bank 
angle  to  form  a  G  command.  The  minimum  LARAP  hold 
altitude  is  200  feet,  which  is  50  feet  above  the  minimum 
descent  altitude  (MDA). 

ntituot 

■tsttikc 


u#il 


Figure  11  LARAP  Block  Diagram 


L.ARAP  is  normally  used  in  conjunction  with  the 
ingress  steering  function  and  during  wings-level  deliveries 
to  maintain  a  selected  altitude.  LARAP  can  also  be  used 
as  a  stand-alone  autopilot.  In  this  mode,  bank  angle  hold 
is  also  provided  through  a  control-stick-steering  type  of 
mechanization  shown  in  Figure  12.  Prioritization 
between  the  pitch  and  roll  channels  is  accomplished  by 
the  roll  angle  limiting  function  scheduled  as  a  function  of 
the  G  command  required  to  null  the  proportional  plus 
derivative  altitude  error.  This  causes  the  aircraft  to  roll 
towards  wings  level  when  additional  G's  are  required  to 
correct  altitude  errors. 
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Figure  12  LARAP  Bank  Angle  Channel 

in  addition  to  the  NWL  bombing  system,  AMAS  can 
perform  automated  wings-level  deliveres.  This  type  of 
delivery  is  selected  in  one  of  two  ways.  The  pilot  can 
select  a  wings-level  delivery  during  ingress  steering,  or 
the  system  may  automatically  switch  to  a  wings-level 
delivery  if  it  is  initially  engaged  very  close  to  the  target 
with  a  small  target  bearing.  The  wings-level  solution 
continuously  computes  a  predicted  bomb  miss  distance 
based  upon  actual  aircraft  states.  The  cross-track  bomb 
miss  distance  is  used  to  drive  the  lateral  steering 
channel.  When  the  along-track  miss  distance  goes  to 
zero,  the  bomb  is  released.  In  the  wings-level  mode  only 
lateral  steering  commands  are  generated.  To  ensure 
altitude  control,  the  LARAP  system  is  utilized,  or  the 
pilot  may  manually  control  the  pitch  axis. 

Lateral-steering  commands  are  sent  to  the  FCS  in 
terms  of  steering  (heading)  error.  This  command  is  used 
to  directly  drive  the  AFTI/F-16  flat-turn  (direct  side 
force),  lateral-control  mode.  Since  the  turn  rate 
provided  by  flat  turn  is  fairly  limited,  a  blending  network 
is  employed  (see  Figure  13)  to  command  roll  rate  for 
large  steering  errors.  This  provides  a  quicker  nulling  of 
gross  errors  while  retaining  the  superior  fine  tracking  of 
flat  turn  for  small  corrections. 


Figure  1)  Ingres*- Steering  Command-Blending  Function 


Following  weapon  release,  the  automated  egress 
steering  function  is  activated  to  guide  the  aircraft  to  a 
preset  egress  altitude  while  maintaining  a  high  turn  rate. 
This  is  accomplished  through  a  variation  of  the  LARAP 
autopilot  system.  A  predetermined  egress  altitude  is  set 
as  the  LARAP  reference  altitude  for  the  sample  and  hold. 
To  avoid  pulling  negative  G's  and  still  reach  the  egress 
altitude  qu'ckly,  the  aircraft  bank  angle  is  scheduled  as  a 
function  of  height  above  egress  altitude.  This  results  in  a 
very  aggressive,  high-G  slicing  maneuver. 


GUNNERY  SYSTEM 

The  closed-loop  air-to-air  gunnery  problem  involves 
solving  the  lead-angle  geometry  problem,  shown  in  Figure 
14,  and  steering  the  aircraft  to  null  the  lead-angle  error. 
In  addition  to  nulling  the  lead-angle  error,  the  inertial 
target  rate  must  be  matched  for  steady  state  tracking. 
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Figure  14  Alr-to-Air  Gunnery  Lead-Angle  Geometry 

Existing  F-16  gunnery  algorithms  will  not  support 
closed-loop  tracking,  since  they  either  do  not  compute 
lead  terms  (hot-line  type),  or  they  require  the  pilot  to 
empirically  determine  inertial  target  rates  by  matching 
his  aircraft  rates  with  the  target  (LCOS).  AMAS  uses  the 
director-type  gun  sight  to  compute  lead  angles  by  using 
measurements  for  both  aircraft  states  and  target  states. 

The  AMAS  gunnery  system  requires  STS  lockon  for 
coupled  operation.  The  STS  may  be  cued  by  either  the 
fire  control  radar  or  the  pilot's  helmet-mounted  sight. 
Both  the  radar  and  STS  are  cued  to  a  common  line  of 
sight.  If  either  achieves  a  lockon,  the  other  sensor  will 
remain  in  a  cue  state  until  it  also  locks  on. 

The  key  to  the  director  computation  is  the 
determination  of  bullet  time  of  flight.  Since  the  future 
bullet  range  is  not  known,  it  is  not  possible  to  solve  for 
time  of  flight  from  the  geometry  alone.  Two  equations 
are  therefore  required,  relating  time  of  flight  and  bullet 
range.  The  first  relationship  is  formed  by  considering  the 
draz  forces  acting  upon  the  bullet.  For  supersonic  20mm 
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bullets,  the  ballistic  coefficient  is  inversely  proportional 
to  the  square  of  the  bullet  velocity.  Total  drag,  which 
acts  on  the  bullet,  can  then  be  formulated  and  doubly 
integrated  to  determine  the  bullet  range  as  a  function  of 
time  of  flight  and  initial  bullet  velocity  (aircraft  velocity 
plus  muzzle  velocity). 

Df  '  vbit£  '  Vf  Tf 

The  next  portion  of  the  director  time-of-flight 
calculation  requires  solving  the  basic  geometry  problem 
shown  in  Figure  14.  This  provides  a  relationship  between 
bullet  time  of  flight  and  future  target  range  as  a  function 
of  relative  target  states. 

Dp  -  (R  +  VtT£Cos  A0  -  .5atTf^sin  A0)/cos  V 

Equating  these  two  expressions  yields  a  third-order, 
closed-form  expression  for  bullet  time  of  flight.  The 
third-order  term,  not  found  in  most  gunnery  solutions, 
arises  from  the  target  acceleration  term.  This  target 
state  is  provided  by  the  AFTI/F-16  sensor/tracker  target- 
state  estimator.  For  real-time  considerations,  the  cubic 
equation  is  solved  using  an  iterative  (Newton's)  method 
which  yields 

t£  "  Tf  -  </(^7’) 

where  (e)  is  the  residual  of  the  cubic  equation  solved  at 
the  current  estimate  of  time  of  flight. 

Instability  in  the  time-of-flight  solution  can  arise 
for  certain  geometries  and  flight  conditions  when  the 
bullet  cannot  physically  reach  the  target.  Numerically, 
the  solution  will  oscillate  about  a  relative  minimum  or 
maximum.  To  prevent  this,  a  dynamic  limit  on  bullet 
range  and  time  of  flight  is  computed. 

Given  the  bullet  time  of  flight,  target  velocity,  and 
acceleration,  the  target  position  can  be  predicted  one 
time  of  flight  into  the  future.  The  error  between  the 
current  gun-lead  angle  and  the  required  gun-lead  angles 
can  now  be  computed  in  azimuth  and  elevation  (assuming 
the  track  is  converging)  as 

Azlae  “  8ln‘l  (RRV  *  RV/R 
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These  parameters  are  coupled  into  the  flight  control 
system  to  be  nulled.  This  mechanization  provides  a  zero- 
order  system  which  will  develop  steady  state  errors  under 
accelerating  conditions.  In  order  to  provide  first-order 
control,  rate-aiding  terms  must  also  be  used.  The 
required  rate  is  essentially  the  derivative  of  the  lead 
angle  and  is  computed  bv  dividing  the  future-target  range 
rate  by  the  future-target  range  (bullet  range). 
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To  provide  a  measure  of  compensation  for  the  cross 
coupling  between  azimuth  and  elevation  lead-angle  error 
while  rolling,  the  rate-aiding  terms  are  modified  as 
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The  basic,  flight-control  task  is  to  null  the  lead-  1 

angle  errors  while  matching  the  inertial  target  rates.  , 

Pilot  commmand  blending  and  structural  limiting  is  also  • 

provided.  The  AFTI/F-16  air-to-air  control  laws  provide  1 

dedicated  feedback  paths  for  all  body  rates  as  well  as  for  J 

lateral  and  normal  acceleration.  These  same  inner-loop  t 

control  laws  are  used  by  conditioning  the  FCC-computed,  i 

lead-angle  error  commands,  and  lead-angle  rate  j 

commands  to  provide  body  rate  and  acceleration 
commands.  These  signals  are  then  summed  into  the 
inner-loop  controls  just  as  the  manual  pilot  commands  are 
summed. 

The  longitudinal  command  coupler  is  shown  in 
Figure  15.  The  desired  pitch-rate  command  Is  formed  by 
the  weighted  sum  of  the  elevation  lead-angle  error  and 
lead-angle  rate.  After  limiting,  the  rate  signal  is 
converted  to  an  equivalent  G  command  for  pilot- 
command  blending  and  structural  limiting.  The  pilot- 
command  blending  function  allows  the  pilot  to  bias  the  G 
command,  as  well  as  to  completely  override  the  command 
to  the  full  opposite  leveL  To  add  to  the  automated 
command,  the  pilot  must  first  provide  a  manual  input 
equal  to  the  current  automated  command.  Any  additional 
manual  command  Is  then  added  to  the  automated 
command.  Following  structural  limiting,  the  total-G 
command  and  the  equivalent  pitch-rate  command  is 
summed  into  the  normal  acceleration  and  pitch-rate 
command  paths  in  the  inner-loop  control  laws. 


Figure  IS  Longitudinal  Command  Coupler  for  Alr-to-Alr 

The  lateral-directional  command  coupler  is 
somewhat  more  complex  than  its  longitudinal  counterpart 
(see  Figure  16).  For  small  tracking  errors,  the  directional 
control  axis  can  provide  adequate  performance.  A 
weighted  blend  of  lead-angle  error  and  lead-angle  rate  is 
computed  and  converted  into  an  equivalent  G  command. 
This  command  (after  limiting)  is  summed  into  the  inner- 
loop,  lateral-acceleration  command  path.  For  large  lead- 
angle  errors,  the  best  tracking  performance  is  obtained 
by  rolling  the  azimuth  lead-angle  error  into  elevation.  It 
can  then  be  nulled  by  the  high-authority  pitch  channel. 
For  this  purpose,  the  lead-angle  error  is  used  to  generate 
a  roll-rate  command.  For  low-turn-rate  targets,  it  is  also 
necessary  to  feed  the  azimuth  lead-angle  rate  into  the 
roll  path  to  keep  the  target  and  ownship  turning  planes 
coincident.  Since  this  path  is  destabilizing  for  moderate 
or  high  turn-rate  targets,  the  gain  in  this  path  Is 
scheduled  as  a  function  of  aircraft  normal  acceleration. 


36 


Figure  1C  Lateral-Directional  Command  Coupler  for 
Alr-to-Air 

Pilot-command  blending  is  performed  by  summing  the  roil 
stick  and  rudder-pedal  commands  into  the  automated 
signals. 


SUMMARY 

The  automated  guidance  and  control  of  fighter 
aircraft  in  combat  is  a  real  technology.  The  development 
of  the  AFTI/F-1C  AMAS  capability  has  yielded  a  system 
with  high  tactical  applicability.  The  system  is  currently 
in  the  flight-test  demonstration  phase  and  is  showing 
excellent  results.  On  the  basis  of  flight-test  experience, 
additional  changes  are  being  made  to  the  system  to 
achieve  maximum  utility  and  effectiveness.  The  basic 
structure  of  the  system  is  proving  itself  and  points  to  the 
huge  benefits  that  can  be  obtained  from  highly  integrated 
systems. 
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ABSTRACT 

System  safety  issues  in  the  highly  integrated 
AFTI/F-U  Automated  Maneuvering  Attack  System 
(AMAS)  are  of  paramount  importance.  Multiple  single- 
thread  subsystems  are  involved  in  the  distributed  pro¬ 
cessing  network  required  to  perform  the  AMAS  weapons 
delivery.  This  paper  addresses  the  AMAS  approach  to 
system  safety  which  consolidates  the  system-safety  and 
redundancy-management  requirements  in  a  functional 
system-wide  design. 


INTRODUCTION 

The  System-Wide  Integrity  Management  (SWIM) 
provides  the  AMAS  design  with  system-wide  management 
of  flight-safety  issues  during  automated  flight.  The  in¬ 
flight  SWIM  consolidates  the  monitoring  of  critical  flight- 
safety  parameters  provided  by  avionics  subsystems  and 
various  flight-control  sensors.  The  SWIM  function  also 
provides  for  safe  recovery  and  transition  to  manual  flight 
control  from  automated  modes. 

The  SWIM  design  has  four  functional  areas  that  are 
partitioned  to  various  subsystems.  These  functions 
include 

1.  collision  avoidance 

2.  flight-critical  sensor  fusion 

3.  physical  constraint  monitors,  and 

4.  AMAS  fault  processing. 

In  addition  to  these  functional  areas,  the  SWIM  design 
relies  upon  rigorous  design  testing,  subsystem  built-in 
test  (BIT),  self-test,  In-Flight  Integrity  Management 
(IFIM),  and  pilot  monitoring  to  defend  against  systemic 
hazards. 

COLLISION  AVOIDANCE 

The  AMAS  collision  avoidance  task  has  three 
primary  functions.  The  first  function,  which  is  active  in 
the  air-to-surface  mode,  is  ground  collision  avoidance. 
The  second  function  is  ownship-to-target  collision 
avoidance,  which  is  active  in  the  AMAS  air-to-air  mode. 
The  third  collision  avoidance  function  is  the  G-Induced 
Loss  of  Consciousness  (GLOC)  recovery,  which  is  active 
in  the  manual  and  automated  air-to-air  modes. 
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Ground  Collision  Avoidance 

The  ground  collision  avoidance  (GCA)  function  is  a 
back-up  to  the  AMAS  primary  guidance  algorithms.  The 
GCA  serves  as  a  last  line  of  defense  against  systemic 
hazards  (hardware  and  software)  which  might  cause  the 
automated  system  to  penetrate  the  pilot-selectable 
Minimum  Descent  Altitude  (MDA).  It  also  cues  the  pilot 
in  both  manual  and  automated  modes  as  to  when  a  flyup 
will  be  required  to  prevent  MDA  penetrations. 

The  first  GCA  function  is  the  computation  of  when 
(or  if)  a  flyup  is  required.  The  ground  collision  avoidance 
algorithm  (GCAA)  provides  a  real-time  estimate  of  the 
altitude  required  to  execute  a  flyup  for  a  given  set  of 
initial  conditions  (see  Figure  1).  If  the  difference 
between  the  current  AGL  altitude  and  the  MDA  is  less 
than  the  estimated  altitude  required  to  perform  the 
flyup,  then  a  flyup  is  automatically  initiated. 


Figure  1  GCA  Automatic  Flyup  Sequence 


The  GCAA  is  an  empirically  generated  polynomial 
derived  from  simulation  runs  that  parametrically  varied 
the  aircraft's  total  velocity,  vemcal  velocity,  bank  angle, 
roil  rate,  and  load  factor  at  the  flyup  initiation.  These 
parametric  initial  conditions  were  correlated  with  the 
altitude  required  to  perform  the  flyup,  thus  generating  a 
data  base.  Figure  2  depicts  the  altitude  required  to  fly  up 
for  wings-level  diving  initial  conditions.  Similar  cor¬ 
relations  were  performed  to  account  for  varying  bank 
angle,  roll  rate,  and  load  factor. 
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Figure  2  Wings  Level  Altitude  Required  to  Plyup 
A  time-to-flyup  is  computed  as  follows, 

AGLn1r  -  MDA  -  Az 

Sip  “  -V^ 

where:  typ  ■  time-to-flyup 

AGLait  ■  Above  Ground  Level 

altitude 

MDA  ■  Minimum  Descent  Altitude 

Az  «  GCAA  predicted  altitude 

required  to  flyup 

V  ■  vertical  velocity 

z  (positive  in  a  climb) 

The  time-to-flyup  is  used  to  position  a  set  of  chevron 
symbols  on  the  Head-Up  Display  (HUD).  The  chevrons 
are  displayed  on  the  HUD  at  five  seconds  to  flyup  and 
converge  to  an  V  as  the  time-to-flyup  goes  to  zero  (see 
Figure  3).  The  vertical  bars  on  the  chevrons  denote,  to 
the  pilot,  that  the  automated  flyup  is  armed.  In  the 
AMAS  modes,  a  flyup  will  automatically  be  initiated 
when  the  chevrons  come  together  and  touch.  The 


ANTICIPATION  CUIt 


Figure  3  HUD  Flyup  Anticipation  Cues 


chevrons  are  also  displayed  (without  the  arming  bars) 
during  manual  operation  but  then  it  is  the  pilot's 
responsibility  to  manually  perform  the  flyup  if  required. 

The  second  GCA  function  is  the  execution  of  the 
flyup  maneuver  itself  which  works  as  follows.  A  roll  rate 
is  commanded  proportionally  to  the  bank  angle  required 
to  restore  level  flight.  As  soon  as  the  bank  angle  is 
within  the  range  +  or  -  90  degrees,  a  five-g  pull-up  is 
commanded.  The  flyup  is  terminated  if  the  vertical 
flight  path  angle  is  greater  than  three  degrees  and  the 
bank  angle  is  within  +  or  -  30  degrees.  In  any  event,  the 
flyup  is  terminated  after  ten  seconds,  if  the  first 
condition  is  not  satisfied,  as  a  safeguard  in  situations 
such  as  stalled  or  slow-speed  flight. 

The  initial  GCA  design  criteria  was  to  recover  as 
close  to  the  MDA  as  possible  (to  allow  the  maximum 
AMAS  maneuvering  envelope)  avoiding  any  MDA 
penetrations.  But  flight-test  experience  indicated  that 
the  pilots  preferred  an  additional  pad  above  the  MDA. 
The  pad  chosen  was  to  provide  a  one-second,  time-of- 
flight,  minimum-altitude  recovery  above  the  ground.  For 
example,  a  flyup  occurring  with  an  initial  sink  rate  of  S00 
feet-per-second  should  recover  with  a  minimum  AGL 
altitude  of  SOO  feet.  This  modification  was  implemented 
with  a  simple  coefficient  modification  of  the  GCAA 
polynomial. 

Air-to-Air  Collision  Avoidance 

The  AMAS  air-to-air  collision  avoidance  (AACA)  is 
functionally  similar  to  the  GCA.  The  three  main  tasks 
for  the  AACA  are  (1)  the  computation  of  when  or  if  a 
breakaway  is  required,  (2)  the  computation  of  which 
direction  to  breakaway,  and  (3)  the  execution  of  the 
breakaway  maneuver  itself.  The  determination  of  when 
to  breakaway  is  complicated  by  the  fact  that  the 
encounter  geometries  are  complex  and  the  target  may 
maneuver  unpredictably.  Therefore,  the  AACA  design 
approach  provides  a  minimum  range-to-target  to  initiate 
the  breakaway.  The  pilot  is  informed  as  to  when  and 
which  way  the  breakaway  will  occur.  Using  this 
information  and  his  tactical  situation  awareness,  the  pilot 
can  either  allow  the  auto  breakaway  to  proceed,  or  he 
can  manually  override  the  automatic  maneuver. 

The  first  AACA  task  is  the  determination  of 
whether  a  breakaway  is  required.  If  either  of  the 
following  two  conditions, 

R  <  1000  ft  for  R  >  -333  ft/sec 

or 

R  +  t0R  <  500  ft  for  R  <  -333  ft/sec 

where:  R  -  range-to-target 

R  ■  range  rate -to -target 


3.5  for  Vru/R  >  .95 

tQ  -  10  (Vru/R)-6  for  .75  <  Vru/R  <  .95 

u  1.5  for  Vru/R  <  .75 

Vru  -  relative  target  body  x-axis 
velocity 


art  satisfied,  a  breakaway  is  initiated.  A  time-to- 
breakaway  is  generated  by  dividing  the  range  conditions 
above  by  the  range  rate-to-target. 

The  second  AACA  function  is  the  determination  of 
the  breakaway  direction  when  a  breakaway  is  required 
which  is  computed  as  follows, 

•sign (bank  angle) 

Roll  „  for  load  factor  >  1.5  g's 
Direction  •sign(azimuth  los  rate) 

for  load  factor  <  1.5  g's 

The  final  AACA  task  is  the  execution  of  the 
breakaway  maneuver.  The  intent  of  the  breakaway 
maneuver  is  to  roll  orthogonally  to  the  initial  breakaway 
attitude  and  to  command  a  load  factor.  The  controller 
mechanizing  this  task  commands  five-g's  in  pitch  for  five 
seconds  while  simultaneously  commanding  180  degrees 
per  second  roll  rate  for  0.9  seconds. 

The  pilot  is  Informed  of  the  time-to-breakaway  via 
the  HUD  chevrons  that  were  used  for  the  GCA  time-to- 
flyup.  The  chevrons  cue  the  pilot  as  to  when  a  breakaway 
will  be  required.  The  breakaway  direction  indication  is 
displayed  in  the  HUD  by  enabling  only  the  arming  bar  on 
the  break-X  chevron  in  the  computed  roll  direction  of  the 
breakaway.  The  break-X  chevron  is  displayed  in  the  HUD 
in  both  the  manual  and  automated  air-to-air  gunnery 
modes,  but  the  breakaway  direction  arming  bar  is  only 
displayed  in  the  automated  air-to-air  mode. 


G-Induced  Loss  of  Consciousness 

The  third  collision-avoidance  function  is  the  G- 
Induced  Loss  of  Consciousness  (GLOC)  recovery  mode. 
GLOC  is  a  phenomenon  that  is  prevalent  in  high- 
performance  aircraft  that  are  capable  of  rapid  g-onset 
and  sustained  high-g  maneuvers.  The  pilot  may 
experience  muscle  spasms,  confusion  or  disorientation, 
apathy,  and  amnesia  when  executing  these  maneuvers. 
Since  the  primary  causes  of  GLOC  are  rapid  and 
unanticipated  g-onset,  and  since  the  AMAS  air-to-air 
gunnery  system  has  full  pitch  and  roll  authority  (9  g’s 
pitch  combined  with  rolls),  the  AFTt/F-16  program  is 
especially  involved  in  the  GLOC  problem.  Therefore,  the 
AFTI/F-16  GLOC  system  is  designed  to  function  in  both 
manual  and  automated  air-to-air  modes. 

The  AFTI/F-16  GLOC  design  modifies  the  air-to- 
surface  GCA  mechanization  to  provide  a  pilot-selectable 
MSL  floor  that  the  aircraft  should  not  penetrate  (see 
Figure  4).  A  modified  GCAA  triggers  the  GLOC  recovery 
to  prevent  penetration  of  the  MSL  floor.  This  modified 
GCAA  also  computes  a  time-to-auto  recovery,  which  is 
used  to  position  the  HUD  break-X  chevrons,  providing  the 
pilot  with  an  anticipation  cue  for  the  GLOC  recovery 
Initiation. 

When  the  GLOC  recovery  is  initiated,  an  attitude- 
hold  autopilot  coupler  rolls  the  aircraft  to  a  wings-level 
attitude,  arrests  the  rate  of  descent,  and  maintains  an 
MSL  altitude  above  the  selected  floor.  The  pilot  then  has 
ample  opportunity  to  recover  from  the  GLOC  condition, 
terminate  the  auto-recovery  system,  and  resume  manual 
control. 


Figure  4  GLOC  Auto- Recovery  Scenario 


FLIGHT  CRITICAL  SENSOR  FUSION 

The  integration  of  the  avionics  suite  with  the  flight 
control  system  on  the  AFTI/F-16  has  introduced  an 
entirely  new  class  of  senaor  monitoring  and  verification 
challenges  —  that  being,  how  to  provide  safe  and  reliable 
system  performance  with  single-thread,  flight-critical 
sensors  and  computational  paths.  The  AMAS  SWIM  design 
has  addressed  several  key  aspects  in  this  area.  The 
nucleus  of  the  SWIM  design,  which  makes  this  capability 
realizable,  is  the  Digital  Flight  Control  System  (DFCS). 
The  fact  that  the  DFCS  can  communicate  with  the 
avionics  suite  via  the  MIL-STD-1553  Avionics/Multiplex 
Bus  (AMUX)  allows  the  unprecedented  interrogation 
capability  of  the  single-thread  flight-critical  paths  (see 
Figure  5).  The  DFCS,  as  the  final  link  in  the  automated 
control  of  the  aircraft,  scrutinizes  all  avionic  com¬ 
munications  carefully. 


Figure  5  AFTI/F-16  Avionics  Bus  Architecture 

The  attitude  information  from  the  Inertial 
Navigation  System  (INS)  is  compared  with  the  body  rates 
of  the  flight-control  rate  gyros  for  gross  anomalies  in  the 
attitude  information  (see  Figure  6).  The  mode  control 
information  from  the  Stores  Management  Set  (SMS)  is 
required  to  contain  a  predefined  bit  pattern  in  order  for 
the  DFCS  to  change  flight-control  modes. 
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Figure  •  Attitude  Estimator 

The  information  from  the  Fire  Control  Computer 
(FCC)  to  the  DFCS  is  examined  thoroughly,  as  it  contains 
commands  directly  affecting  aircraft  flight  path.  A 
checksum  is  computed  on  the  FCC-to-DFCS  AMUX  block 
to  assure  valid  communication.  The  FCC  also  computes 
tiro  test  problems  based  on  known  inputs  to  the  GCAA. 
The  test  problem  output  must  (1)  be  valid,  and  (2)  change 
periodically  for  continued  A  MAS  operation  to  be 
authorised.  During  AMAS  air-to-surface  operation,  the 
FCC  AGL  altitude  is  compared  with  the  INS  vertical 
velocity  to  provide  cross  checks  of  the  AGL  altitude  as 
well  as  the  INS  rate  data  (see  Figure  7). 
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Figure  T  Altitude  Estimator 


The  FCC,  as  the  AMUX  bus  controller,  Is  also  a 
critical  link  in  the  AMAS  SWIM  design.  As  such,  the  FCC 
performs  the  avionics  sensor  comparison  and  fusion.  In 
air-to-surface  operation,  this  involves  a  determination 
that  the  GCA  has  continuous  and  reliable  inputs.  The 
primary  GCA  inputs  are  AGL  altitude  and  AGL  altitude 
rate,  and  to  a  leaser  extent,  roll  attitude,  roll  rate,  and 
load  factor.  While  the  AFTI/P-ll  radar  altimeter  is  a 
dedicated  AGL  sensor  (with  160  degrees  of  bank-angle 
coverage),  it  only  "sees"  terrain  below  the  aircraft.  The 
Fire  Control  Radar  provides  a  "look-ahead"  capability, 
but  It  has  other  targeting  tasks  during  some  segments  of 
the  AMAS  air-to-surface  delivery.  With  these  system 
capabilities  in  mind,  the  FCC  fuses  the  AGL  sensors 
providing  valid  AGL  altitude  estimates  that  are  critical 
for  alr-to-surface  AMAS. 


For  air-to-air  AMAS,  the  FCC  monitors  the  target- 
state  estimates  from  the  Sensor  Tracker  Set  (STS)  that 
are  inputs  to  both  the  AMAS  gunnery  director  and  the 
AACA.  These  signals  are  checked  for  validity  and 
conaiatency.  A  MUX  block  checksum  and  "heartbeat" 
signal  are  also  included  within  the  STS-to-FCC  AMUX 
data  block. 


PHYSICAL  CONSTRAINT  MONITORS 

The  physical  constraint  monitors  consist  of  the 
Operational  Misaion  Restrictions  (OMR).  The  OMR 
monitors  are  based  on  apriori  knowledge  about  overall 
system  behavior.  These  monitors  detect  conditions  that 
are,  by  definition,  out  of  bounds  of  the  groundrules  for 
normal  AMAS  behavior.  For  example,  airspeed,  altitude, 
and  attitude  limits  are  imposed  for  AMAS  operation. 
Also,  mode  protocol  checks  assure  that  all  critical 
subsystems  (SMS,  FCC  and  DFCS)  are  operating  in 
consistent  modes  that  can  support  AMAS  operation. 


AMAS  FAULT  PROCESSING 

Upon  detection  of  a  fault  during  AMAS  operation,  a 
sequence  of  events  is  triggered:  (1)  normal  AMAS 
operation  is  suspended  and  a  flyup  or  breakaway  is 

executed  if  the  system  is  armed;  (2)  the  process, 

subsystem,  or  function  in  error  is  isolated  and  catalogued 
for  fault  reporting;  and  (3)  an  AMAS-disengage  warning 
light  and  warning  tone  are  activated.  There  are  two 
primary  display  vehicles  that  inform  the  pilot  as  to  the 
exact  nature  of  the  cause  of  disengagement.  The  first  is 
the  SWIM  fault  display  on  the  DFCS  page  of  the 

Multifunction  Display  Set  (see  Figure  8).  This  message 

contains  the  reason  the  DFCS  disengaged  AMAS 
operation.  The  second  display  is  the  Data  Entry/Cockpit 
Interface  System  pilot  fault  list  which  provides  the  pilot 
with  fault  information  for  a  class  of  avionics  faults. 


SWIM  FAULT 
OISPLAY 


Figures  MFD  DFCS  Display 
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The  AFTI/F-U  SWIM  design  effort  provide*  •  wide 
spectrum  of  practice!  experience  applicable  to  the  devel¬ 
opment  of  highly  integrated  avionics  and  flight  control 
systems.  Proven  techniques  for  verifying  that  single- 
thread,  flight-critical  subsystems  are  functioning 
properly  are  especially  Important  for  future,  automated- 
flight -path-  control  systems.  Smarting  fighter  tech¬ 
nologies  will  employ  increasingly  more  complex  inte¬ 
grated  systems  to  alleviate  pilot  workload.  To  ensure 
fail-safe  operation  In  this  environment  a  system-wide 
approach  for  integrity  management  must  be  employed. 
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AB8TRACT 

Tha  objective  of  this  paper  is  to  describe  the 
development  of  software  targeted  for  the  avionics  suite 
of  the  AFTI/F-18  demonstrator  aircraft.  It  will  deal  with 
all  aspects  of  avionics  software  including  software 
developed  inside  and  outside  of  General  Dynamics. 
Primary  emphasis  will  be  placed  on  that  avionics 
software  considered  significant  in  fulfilling  the  objectives 
of  the  AMAS  Phase  of  the  AFTI/P-1<  Program.  For  the 
purposes  of  this  paper,  the  term  "software  development" 
will  include  all  efforts  necessary  in  taking  an  approved 
system  design  (and  the  accompanying  subsystem  par¬ 
titioning)  and  producing  a  software  product  capable  of 
supporting  all  system-level  testing.  The  discussion  will 
approach  not  only  the  delivered  product,  but  also  the 
facilities  used  to  develop  the  product  since  these  facta 
weigh  heavily  on  the  quality  of  work  completed  at  each 
step  in  the  development  process. 


INTRODUCTION 

This  discussion  describes  the  approach  used  in 
implementing  software  solutions  within  embedded  com¬ 
puter  systems  on  the  AFTI/P-16  during  the  AMAS  Phase. 
Regardless  of  the  type  of  product  software  development 
task,  the  steps  involved  in  producing  the  "product"  cannot 
be  skipped  without  some  degree  of  compromise  in  the 
quality  of  the  product.  Careful  analysis  of  the  problem 
or  task  must  occur  at  some  point  in  the  product  life- 
cycle.  The  earlier  in  the  development  it  occurs,  the 
cheaper  the  resultant  product  will  be  and  the  greater  the 
likelihood  that  it  will  be  a  quality  product.  The  penalty 
for  problem  analysis  after  the  fact  is  loss  of  the 
opportunity  to  repair  what  is  probably  a  substandard 
software  product  or  component  part  of  a  product.  By 
definition,  all  aspects  of  the  system  design  process 
originate  within  the  system  design  activity.  The  system 
design  task  frequently  receives  attention  from  the 
detailed  design  activity  (often  referred  to  as  system 
mechanization)  and  occasionally  from  the  customer/ 
program  management  level  (program  policy  regarding 
equipment  selection,  budget,  and  development  con¬ 
straints). 


DeSIGN  DOCUMENTATION 

Completion  of  the  initial  design  phase  is  marked 
with  completion  of  several  key  documents.  The  first 
document  to  address  the  involvement  of  software  engi- 
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neering  in  the  development  of  embedded  computer 
software  is  the  Computer  Program  Development  Plan. 
This  document  identifies  the  software  development 
environment,  personnel  organization,  policies,  standards, 
and  incremental  milestones.  Next,  in  order  of  required 
completion,  is  the  Computer  Program  Development 
Specification  (or  B-S)  which  is  a  software  requirements 
document  usually  written  at  the  subsystem  level,  but  in 
some  rare  instances  it  is  written  for  several  closely 
related  subsystems.  No  logic  diagrams  will  be  found  in 
this  document,  but  the  mapping  of  software  partitioning 
to  functional  requirements  will  be  seen  for  the  first  time. 
This  document  typically  segregates  and  outlines  the 
input,  processing,  and  output  requirements  for  each 
specific  function.  Also,  the  flow  of  data  between 
functions  and  into  and  out  of  the  subsystem  is  outlined. 
System  mechanization  is  described  at  a  moderately  high 
level  due  to  gaps  inherent  in  the  on-going  design  process 
and  system  level  partitioning  changes.  The  Design 
Change  Request  (DCR)  represents  an  incremental  step  in 
the  overall  design  change  process  involved  in  trans¬ 
forming  production  avionics  into  AFTI/F-16  avionics. 
During  this  transformation.  Integrated  Fire  and  Flight 
Control  (IFFC)  to  the  avionics  suite  was  added  and  the 
Digital  Flight  Control  System  (DFCS)  was  adapted  to 
support  the  IFFC  modes.  Each  DCR  outlines,  in  detail, 
how  an  individual  design  objective  will  function,  the 
affected  subsystems  and  the  anticipated  results  of  the 
design  change.  The  AMAS  Avionics  System  Manual  is  not 
a  true  design  guide,  but  it  has  been  influential  in  tne 
design  process.  It  discusses  all  of  the  hardware  assets 
used  on  the  program  as  well  as  any  modifications  or 
changes  in  intended  application.  System-level  mech¬ 
anization  is  covered  in  considerable  detail  thus  making  it 
a  valuable  document  to  the  mechanization  engineer.  The 
Interface  Control  Document  (ICD)  provides  exactly  what 
its  name  implies  -  an  accurate  description  of  the  inter¬ 
face  between  subsystems.  This  makes  the  ICD  one  of  the 
most  important  documents  in  describing  inter-subsystem 
relationships.  Like  the  Avionics  System  Manual,  it  is  not 
a  true  design  document,  but  inputs,  outputs,  and  the 
required  processing  are  ail  directly  related  to  the 
description  of  the  interface.  Figure  1  describes  the 
AFTI/F-16  system  architecture  and  notes  the  more 
signi.iv.ant  subsystems. 


DEMONSTRATION  THROUGH  INNOVATION 

The  AFTI/F-16  Program  has  never  advocated  the 
recreation  of  available  product  software,  but  instead  uses 
existing  software  when  the  particular  application  allows. 


Figure  1  APTl/F-16  Multiplex  Bus  Architecture 


New  or  modified  software  is  developed  only,  out  of 
necessity,  to  provide  a  capability  that  did  not  previously 
exist. 

In  direct  contrast  to  the  AFTl/F-16  DFCS  Phase  in 
which  new  (DFCS  and  VIA)  and  extensively  modified 
(SMS,  FCC)  software  was  abundant,  the  AMAS  Phase 
consists  almost  entirely  of  software  originated  on  other 
programs  and  modified,  while  retaining  the  original 
software  architecture.  The  degree  of  modification  varied 
from  subsystem  to  subsystem  and  from  function  to 
function  within  a  given  subsystem.  The  MSIP  program 
was  in  its  infancy  when  the  decision  was  made  to  utilize 
the  core  avionics  and  its  accompanying  software.  The 
Bendix  supplied  Color  Programmable  Display  Generator 
(CPDG)  originated  with  the  F-20  Tigershark  development 
program,  and  the  Helmet-Mounted  Sight  (HMS)  originated 
with  the  AH-60D  helicopter  program.  The  acquired 
software  products,  which  were  still  in  developmental 
stages,  presented  a  challenge  typical  of  prototypes: 
efforts  to  promote  the  maturation  of  the  software 
products  had  to  continue  while  the  features  necessary  to 
support  the  AMAS  demonstrations  were  being  installed. 
The  analysis  necessary  to  determine  the  partitioning  of 
functions  to  subsystems  originates  with  a  DCR. 


DESIGN  CONSIDERATIONS 

The  four  core  avionics  subsystems  (FCC,  SMS, 
MFDS,  and  DE/CIS)  existed  as  preproduction  assets  when 
their  implementation  on  the  AFTI/F-16  began.  The 
constant  monitoring  of  software  development  by  groups 
supporting  the  MSIP  program,  while  still  designing 
changes  to  support  the  approved  demonstrations,  required 
considerable  finesse  in  "dovetailing"  changes  (which 
usually  means  combining  corrections  from  one  devel¬ 
opment  source  with  modifications  or  enhancements  from 
another)  while  guarding  against  inadvertent  errors.  In 
more  than  one  occurrence,  the  subsystem's  capacity  to 
accommodate  new  functions  consumed  the  specified 
memory  and/or  timing  reserves  and  forced  a  decision  - 
either  to  compromise  capability  or  to  decrease  reserves. 
The  EFCC's  duty  cycle  and  the  ASMS  and  MFDS's 
memory  reserve  requirements  were  relaxed  to  allow  the 
subsystems  to  install  the  functions  necessary  to  support 
the  prescribed  AMAS  demonstrations.  Eventually,  the 
ASMS  was  rebaselined  to  a  more  mature  release  and  the 
duty  cycle  reserve  of  that  subsystem  was  recouped 


through  software  redesign  and  code  optimization.  The 
EFCC  duty  cycle  hovers  near  the  maximum  allowable  for 
dependable  operation. 

The  AMAS  goals  were  partitioned  between  targeted 
subsystems,  and  those  subsystems'  capabilities  were 
examined  to  determine  if  any  software  or  hardware 
changes  were  necessary.  After  performing  this 
subsystem-level  analysis  a  decision  was  made  as  to  (1) 
which  subsystem  would  be  changed,  (2)  how  the  change 
would  be  performed,  and  (3)  whether  or  not  tis  change 
should  be  partitioned  in  an  alternative  subsystem  to 
conserve  development  costs.  Due  to  cost  restrictions, 
vendor-supplied  subsystems  were  chosen  over  in-house 
subsystem  modifications  only  where  (1)  system  per¬ 
formance  may  have  been  compromised,  or  (2)  the 
respective  vendor  was  better  equipped  to  support  the 
task.  Wherever  possible,  the  AFTI/F-16  program  makes 
use  of  off-the-shelf  support  equipment  and  ingenuity  as  a 
primary  means  of  conserving  development  resources. 


TEST  CONSIDERATIONS 

A  problem  was  encountered  in  finding  the  support 
equipment  to  make  the  necessary  AMAS  software 
changes.  Although  systems  were  being  built  at  General 
Dynamics  to  provide  the  capability  of  developing 
software  on  the  core  avionics  suite,  they  were  rarely 
available  for  use  by  AFTI/F-16  personnel.  This  caused  an 
impact  on  product  software  delivery  schedules.  Further¬ 
more,  the  evolution  of  those  systems  away  from  the 
AFTI/F-16  hardware  resulted  in  a  degradation  of  the 
quality  of  our  stand-alone  testing.  The  alternative  was  to 
create  a  separate  development  and  test  environment 
within  the  AFTI/F-16  AMAS  budget.  The  schedule  and 
cost  implications  of  this  alternative  were  prohibitive. 
Although  the  AFTI/F-16  Program  could  create  and 
maintain  its  own  test  station  software,  no  irreversible 
hardware  modifications  were  allowed.  Because  the 
stations  were  software-intensive  and  because  AFTI/F-16 
could  maintain  its  own  support  software,  the  systems 
were  productive.  The  resources  necessary  to  generate 
the  AFTI/F-16  support  software  were  modest  when 
compared  to  the  return  realized  in  system  capability. 
Although  the  systems  possessed  many  limitations, 
considerable  development  and  test  capabilities  were 
realized  for  a  small  investment. 


CORE  AVIONICS  SOFTWARE  DEVELOPMENT 

The  AFTI/F-16  avionics  software  development  did 
not  have  a  dedicated  support  facility  until  mid  1985, 
when  a  Digital  Equipment  Corporation  MicroVAX  II  was 
acquired  to  support  the  Enhanced  Fire  Control  Computer 
(EFCC)  OFP  release  AF04. 

The  DFCS  Phase  avionics  hardware  was  a  mixture 
of  vendor-supplied  prototypes,  custom  components 
fabricated  in  house,  and  GFE  from  the  F-16A/B.  Because 
this  hardware  had  limited  growth  capability,  had 
exceeded  its  service  life  (in  some  cases  by  a  factor  of  2 
or  3),  and  was  difficult  to  maintain  (because  it  differed 
from  production  hardware),  a  decision  was  made  to 
upgrade  the  AFTI/F-16  avionics  suite  with  advanced 
hardware,  which  was  being  developed  for  the  MSIP 
program.  The  MSIP  hardware  provided  several 
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advantages:  (1)  spares  availability  would  be  improved.  (2) 
prototype  hardware  would  not  have  to  be  developed,  (3) 
current  facilities  for  loading  OFPs  could  be  used  with 
little  change,  and  (4)  most  importantly,  the  MS1P 
development  and  test  facilities  could  be  utilized  -  sparing 
the  AFTI/F-16  program  the  considerable  expense  and 
delay  associated  with  developing  a  dedicated  facility. 

A  common  software  architecture  was  developed  by 
MSIP  and  used  on  the  AFTI/F-16  Program.  Each  OFP  is 
partitioned  into  components  that  are  further  divided  into 
modules.  A  module,  the  simplest  form  of  configurable 
software,  usually  defines  a  single  process  such  as 
qualifying  a  weapon  to  the  current  master  mode,  while  a 
component  typically  defines  a  complete  process  such  as 
bus  control. 

With  one  exception,  all  OFPs  were  developed  in  the 
same  fashion.  A  configuration  baseline  was  supplied  by 
the  software  element  manager  on  a  module- by- module 
basis.  The  baseline,  maintained  on  the  Harris  Computer- 
based  Software  Engineering  System  (1  (SES),  was  modified 
by  AFTI/F-16  personnel  working  from  Software  Change 
Requests  (SCRs  ).  The  modified  software  was  transferred 
by  RJE  link  to  the  corporate  IBM  complex  for  test 
compilation  and  the  results  of  the  compilation  were 
transferred  back  to  the  SES.  If  the  compilation  was 
successful,  the  modules  were  used  to  produce  a  linked 
OFP.  Module  level  testing  (Computer  Program  Test  and 
Evaluation,  CPT&E)  for  most  of  the  avionics  hardware 
was  performed  either  on  the  SES  using  a  processor 
simulator,  or  on  the  Software  Test  Station  (STS)  using  the 
target  hardware  and  a  system  simulation  hosted  on  the 
STS.  The  exception  was  the  EFCC  OFP,  which  could  not 
be  tested  on  the  SES  because  the  SES  did  not  have  a 
17S0A  emulation  capability.  Instead,  the  EFCC  OFP  was 
tested  on  either  the  STS  (see  Figure  2)  or  on  a  Delco 
Computer  Support  Equipment  (CSE)  set.  Figure  3  shows 
resources  and  their  use  in  each  step  of  the  development 
process.  Note  the  criticality  of  the  STSs  for  each 
software  product. 


Figure  I  MSIP  Software  Test  Station 


After  initial  CPTAE  testing,  the  OFPs  were 
debugged  In  the  System  Integration  Laboratory  (S1L)  on 
the  STSs.  One  exception  was  the  MFDS,  which  was 
debugged  with  the  use  of  a  Tektronix  Z8002  in-circuit 
emulator.  When  a  problem  was  found,  an  assembly 
language  patch  was  installed  and  became  part  of  the 
baseline  configuration.  When  all  known  problems  were 
solved,  the  OFP  was  ready  for  system-level  integration 


Figure  3  Software  Resources  by  Application 

and  testing,  avionics  subsystem  test  (Stand-Alone 
Verification  and  Validation,  or  V&V).  Figure  4  outlines 
each  level  of  software  development  and  relates  each 
level  of  software  testing.  AFTI/F-16  personnel  had 
access  to  MSIP  development  and  test  facilities  on  a  non¬ 
interference  basis;  typically,  this  meant  120  hours  per 
month.  When  these  facilities  were  unavailable,  a  DEC 
VAX-based  system  was  used  as  an  alternative  because  it 
had  mature  JOVIAL  compilers,  an  extensive  software 
toolset  (including  configuration  control)  and  a  good 
throughput/cost  ratio. 


The  MicroVAX  changed  the  way  an  OFP  is  produced 
and  maintained.  The  most  dramatic  result  was  the 
greatly  reduced  turnaround  time  for  OFP  production  -  the 
compilation  of  an  OFP,  which  formerly  took  24  hours  on 
the  IBM,  can  now  be  accomplished  in  35  minutes  on  the 
MicroVAX.  Similar  results  were  seen  for  the  linkage 
editing  process.  Current  tools  include  a  1750A  emulator 
for  the  MicroVAX  to  eliminate  dependence  on  the  Delco 
1750A  computer  for  CPTAE.  This  quick  turnaround  and 
increased  capability  also  produced  a  change  in  pro¬ 
cedures;  all  DCRs  which  result  in  an  SCR  were 
implemented  in  high-level  language  in  the  actual  program 
module,  rather  than  in  assembly  language  patches  in  the 
assembled  code.  The  net  result  was  the  virtual 
elimination  of  patches  and  the  effort  required  to  main¬ 
tain  them.  The  long  term  goal  was  to  have  a  corrected 
module  compiled  in  the  morning,  tested  in  the  afternoon 
and  at  the  airplane  the  next  day.  Figure  5  describes  the 
current  MicroVAX  II  system  architecture. 

AFTI/F-16  software  was  baselined  from  two 
sources:  (1)  software  developed  by  other  General 

Dynamics  programs  (including  the  avionics  software 
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developed  by  the  MSIP,  referred  to  as  the  core  avionics), 
and  (2)  software  developed  by  a  vendor  for  a  vendor 
supplied  subsystem  (e.g.,  the  sensor  tracker  set  supplied 
by  the  Westinghouse  Electric  Co.,  Inc.). 

General  Dynamics-developed  avionics  software 
adapted  from  MSIP  baseline  software  features  an 
architecture  composed  of  several  generic  components, 
augmented  by  application  components  specific  to 
individual  OFPs.  The  generic  components  are  listed 
below: 


Description 

Control  Program 
Task  State  Executive 
1 5S3/1553B  &  discretes 
I/O  passthru  and  formatting 
Recovery/shutdown 
procedures 

Misc.  service  routines 
Subsystem  Integrity 
(BIT  &  Self-Test) 

Although  the  application  components  are  unique  to 
each  OFP  and  determined  by  subsystem  requirements, 
they  share  important  traits.  Three  of  the  four  target 
processors  are  Z8002  based;  all  four  are  18-bit 
processors,  and  all  four  OFPs  are  written  primarily  in 
JOVIAL  J73.  These  shared  traits  allow  the  use  of 
common  programming  guidelines  and  standards,  and  also 
allow  the  use  of  similar  solutions  to  similar  problems. 
This  has  afforded  the  AFTI/F-16  Program  the  flexibility 
of  shifting  its  manpower  resources  among  avionics 
programs,  as  the  need  arose,  without  experiencing  long 
lag  times  for  the  programmers  to  readjust  after  switching 
tasks. 

Enhanced  Fire  Control  Computer 

The  EFCC  hardware  is  a  GFE  Delco  1750A 
processor  model  M372  capable  of  0.5  million  instructions 
per  second  (MIPS).  The  LRU  is  identical  to  the  MSIP 
hardware.  The  first  AFTI/F-16  EFCC  OFP  (AF01) 
evolved  from  the  MSIP  release  FF02;  it  was  a  rudi¬ 
mentary  OFP  developed  to  support  IFFC  demonstrations 
on  the  RAE  simulator,  capable  only  of  bus  control.  All 
other  FCC  functions,  and  all  ether  avionics  subsystem 
functions  were  simulated  on  the  Harris/7  (and  later 


Harris  H1000)  RAE  simulator.  The  second  EFCC  OFP  was 
baselined  on  MSIP  release  FFQ3  (rather  than  AF01)  to 
take  advantage  of  MSIP  developed  enhancements  and 
corrections;  AFTI/F-16  unique  modifications  from  AP01 
were  redesigned  to  work  with  the  new  baseline.  AF02 
was  generated  primarily  to  allow  open-loop  Phase  A 
flight  testing.  During  this  testing  many  important 
functions  and  algorithms  were  tested;  these  include 
manual  AMAS  Pre-planned  Target  (APPT),  manual  AMAS 
Director  (ADIR)  gun  aiming  option,  System-Wide 
Integrity  Management  (SWIM),  and  Low-Altitude  Radar 
Auto  Pilot  (LARAP).  AF02  also  supported  the  checkout  of 
several  avionics  subsystems:  a  366 -degree  radar  altimeter 
(RALT),  the  CPDG,  the  Color  Map  Reader  System 
(CMRS)  and  the  Sensor  Tracker  Set  (STS). 

EFCC  release  AF03  broke  tradition  in  that  it  was 
based  on  AF02  rather  than  the  latest  MSIP  EFCC  release. 
The  biggest  difference  between  AF02  and  AF03  was  that 
AF03  supported  closed-loop  (automated)  steering.  APPT 
was  tested  in  manual  and  automated  modes,  with  and 
without  updates  from  the  STS.  Extensive  STS  integration 
continued  and  air-to-ground  bombing  results  looked 
promising. 

EFCC  release  AF04  was  baselined  from  AF03  and 
included  support  for  several  new  systems,  including  the 
Digital  Map  Generator  (DMG)  and  Voice  Interactive 
Avionics  (VIA).  The  OFP  also  contained  support  for  the 
Standardized  Avionics  Integrated  Fuze  (SAIF),  G-induced 
Loss  of  Consciousness  (GLOC)  protection,  and  a  more 
complete  implementation  of  ADIR.  It  should  be  noted 
that  the  baseline  for  AF03  and  AF04  was  the  most 
mature  version  of  the  previous  OFP;  considerable  effort 
was  devoted  to  recoding  modules  in  the  new  release  to 
eliminate  the  assembly  level  patches  in  the  previous 
release.  With  AF04,  however,  all  corrections  are  made  in 
JOVIAL  J73  (and  hosted  on  the  MicroVAX  II)  at  the 
module  level  so  that  future  efforts  can  focus  on 
incorporating  new  features,  rather  than  redesigning  to 
correct  old  problems. 

Advanced  Stores  Management  Set  (ASMS) 

The  ASMS  consists  of  an  Advanced  Central 
Interface  Unit  (ACIU)  and  several  Remote  Interface 
Units  of  various  types.  The  ASMS  controls  the  selection, 
monitoring,  conditioning,  and  release  of  stores  on  the 
aircraft  and  maintains  an  inventory  of  these  stores.  In 
addition,  the  ASMS  acts  as  a  backup  bus  controller  to  the 
EFCC.  The  ASMS  facilitates  communication  between  the 
pilot's  displays,  the  data  entry  unit  (MFDS  and  DE/CIS), 
the  weapon  delivery  avionics,  and  the  RIUs.  The  ASMS 
OFP  runs  on  the  same  ACIU  hardware  as  the  MSIP  OFP: 
dual- redundant  Z8002  microprocessors  running  at  3  MHz, 
64K  of  memory,  power  supplies  and  other  supporting 
hardware. 

The  first  ASMS  OFP  (AW01)  was  baselined  on  the 
third  MSIP  release,  WF03,  from  F- 16  Block  25  and 
included  several  MSIP  patches  applicable  to  AFTI/F-16. 
MSIP-only  patches  were  not  included  in  the  baseline.  The 
plan  was  to  adapt  the  baseline  for  AFTI/F-16  by  using 
only  assembly  language  patches  without  updating  the 
source  code,  recompiling,  or  relinking.  This  approach, 
different  from  that  used  with  the  other  avionics  OFPs. 
was  selected  to  avoid  the  high  cost  of  linking  and 
compiling;  it  was  thought  to  be  practical  because  only 
slight  changes  to  the  OFP  were  believed  to  be  necessary. 


EXECUTIVE 
SYSTEM  CONTROL 
INTERFACE  CONTROL 
DATA  TRANSFER 
ERROR  HANDLING 

UTILITIES 

TEST 


The**  changes  included  changing  the  backup  bus  control,  sonnel  hoped  to  avoid  recompiling  the  OFP.  The 

AFTI/F-16  air-to-ground  delivery  modes  and  gunnery  rewritten  component  was  implemented  as  an  assembled 

modes.  One  limitation  of  WF03  was  its  16-Hz  duty  cycle  patch  that  overlayed  the  old  voice  component.  Further 

whereas  AFT1/F-16  core  avionics  used  a  50-Hz  duty  versions  of  AM03  have  included  relatively  minor  changes 

cycle.  This  was  acceptable  since  it  had  only  one  effect  -  such  as  display  discrepancies  and  some  minor  VIA  design 

when  the  FCC  was  powered  off,  the  SMS  acted  as  a  bus  changes, 

controller  and  some  MUX  blocks,  which  should  have  been 

calculated  at  more  than  16  Hz  were  not.  However,  this  Data  Entry/Cockpit  Interface  Set 

had  no  safety-of-flight  impact. 

The  DE/CIS  hardware  is  a  microprocessor-based 
A  new  baseline  was  adopted  for  the  AMAS  Phase  B  interface  between  the  pilot  and  the  navigation  and 
OFP.  It  was  determined  that  it  would  be  easier  to  base  communications  avionics.  The  hardware  consists  of  a  data 

the  new  OFP  on  MS1P  flight  tape  WF04  from  Block  25A  entry  electronics  unit  (DEEU),  which  controls  the 

minus  the  MSIP-only  patches  than  on  AW01.  In  addition  DE/CIS.  The  DEEU  is  based  on  a  Z8002  microprocessor 

to  the  AFTI/F-16  functions  in  AW01,  AW02  eventually  running  at  3  MHz  with  32K  of  memory.  The  memory 

incorporated  such  functions  as  autogun  firing,  SAIF  consists  of  a  20K  code  space,  4K  constant  data  space 

support,  and  modified  backup  bus  control.  A  Phase  C  (both  kept  in  EEPROM)  and  8K  of  variable  data.  The 

version  of  AW02  has  been  generated  that  includes  ail  other  DE/CIS  hardware  units  consist  of  the  data  entry 
Phase  B  functions  and  some  SAIF  corrections.  display  and  the  integrated  keyboard  panel,  which  are  used 

to  read  and  enter  data.  AFTI/F-16  uses  the  IKP  from  the 
Multifunction  Display  Set  aft  station  of  the  F-16D,  rather  than  the  HUD-mounted 

IKP,  to  allow  the  AFTI/F-16  HUD  to  be  used  without 
The  MFDS  hardware  has  three  main  parts:  the  modification. 

Programmable  Display  Generator  (PDG)  and  two 

Multifunction  Displays  (MFDs).  The  MFDS  OFP  was  On  the  MS1P  F-16,  the  DE/CIS  provides  a  method  of 

baselined  on  MSIP  OFP  MF03,  with  modifications  to  entering  radio  frequencies  on  UHF,  VHF,  and  also  IFF, 

support  AFTI/F-16  requirements.  The  modifications  TACAN  and  1LS  parameters.  The  AFTI/F-16  Phase  A 

included  adding  base  and  control  pages  for  the  STS  and  OFP  evolved  from  MSIP  release  DF03  and  while  no 

FCS  and  a  Target  and  Line  of  Sight  Simulation  (TALOSS)  additions  to  the  OFP  were  required,  the  aforementioned 

page.  Other  modifications  included  changes  to  the  functions  were  deleted, 

master  menu,  data  entry  page,  and  hex  data  entry  page. 

Several  MSIP  pages  were  deleted,  including  the  E-0  No  major  problems  were  encountered  with  AD01  in 

weapons  page,  the  navigation  pod  page,  the  target  pod  Phase  A  testing  and  no  modifications  were  needed  to 
page,  and  the  SMS  nuclear  page.  support  Phase  B  testing.  The  Phase  C  OFP  was  based  on 

MSIP  release  DC  12  (Block  25B)  with  extensive  changes 
The  Phase  A  MFDS  OFP  had  two  problems:  it  was  (implemented  through  DCRs)  to  support  the  VIA 

large  enough  to  almost  fill  its  allotted  memory  space  interface. 

(making  patches  difficult  to  shoehorn  in),  and  it  tended  to 

gradually  lose  capability,  leading  to  program  halts.  This  Vendor-Developed  Software 

degradation  was  corrected  in  a  later  release  (AM03)  with 

the  use  of  protected  memory.  The  protected  memory  The  software  targeted  for  the  AFTI/F-16  is 

allowed  test  personnel  to  determine  which  parts  of  the  provided  to  General  Dynamics  on  a  subcontract  basis, 

program  were  overwriting  other  code.  Previously,  the  General  guidelines  for  vendor-developed  software 

overwrite  was  not  detected  until  the  OFP  failed,  and  the  requirements  are  levied  upon  the  vendor  to  the  extent 

offending  code  could  not  be  determined.  OFP  size  possible.  The  following  items  are  considered  minimum 

remained  a  problem  in  later  versions  of  the  Phase  A  OFP;  documentation:  (1)  the  vendor's  interpretation  of  soft- 

in  fact,  some  test  routines  were  deleted  to  allow  more  ware  requirements,  (2)  a  software  design  description,  (3) 

patch  space.  The  final  Phase  A  OFP  completely  filled  a  user's  manual,  and  (4)  an  acceptance  (or  stand-alone) 

the  32K  of  allocated  memory.  test  procedure. 


Incorporation  of  the  patches  into  the  OFP  produced 
a  Phase  B  OFP  of  more  reasonable  size;  other  Phase  B 
corrections  were  minor,  including  patches  to  fix  STS  data 
entry  discrepancies  and  FOR  video  intensity  problems. 

As  mentioned  earlier,  the  Phase  C  release  AM03 
was  the  first  to  use  protected  memory.  Several  major 
design  changes  were  made  to  take  advantage  of  this 
feature.  First,  a  data  base  was  used,  which  separated 
constant  and  variable  data,  to  allow  constant  data  to  be 
stored  in  protected  memory.  The  text  display  and 
formatting  components  were  also  rewritten  to  use  the 
new  data  base.  Second,  a  decision  was  made  to  include 
some  MSIP-developed  test  routines  in  the  recompilation 
to  make  the  OFP  easier  to  debug.  Finally,  the  OFP 
included  a  large  VIA  component.  Testing  the  OFP 
revealed  numerous  problems  throughout  the  component. 
The  problems  were  extensive  enough  to  warrant  a 
rewriting  of  the  component;  however,  AFTI/F-16  per- 


The  STS  is  a  forward-looking  infrared  radar  (FLIR) 
imaging  sensor,  laser,  and  closed-loop  tracking  system 
which  complements  the  FCR  by  providing  an  additional, 
more  accurate  sensor  for  acquisition  and  tracking.  The 
STS  consists  of  two  processors,  a  MIL-STD-1750A  based 
sensor  tracker  processor  and  an  Intel  8086  based  video 
tracker  processor.  The  sensor  tracker  processor  is  pro¬ 
grammed  in  JOVIAL  J73;  the  video  tracker,  in  Pascal, 
with  time-critical  tasks  and  some  I/O  tasks  in  8086 
assembly  language. 

The  STS  OFP  provides  overall  control  of  the  STS 
hardware,  output  for  post  flight  data  analysis,  target 
state  estimation  and  cued  acquisition  in  both  air-to-air 
and  air-to-ground  modes.  In  addition,  the  OFP  provides 
both  a  built-in  test  and  a  self-test  capability. 


Helmet-Mounted  Sight 

The  helmet-mounted  sight  was  designed  to  allow  the 
pilot's  actual  line  of  sight  (LOS)  to  be  used  to  cue  the 
Fire  Control  Radar  (FCR)  and  STS,  and  to  allow  these 
sensors  to  cue  the  pilot  to  their  line  of  sight.  The  system 
consists  of  a  transmitter,  receiver,  control  panel  and  a 
Sight  Electronics  Assembly  (SEA).  The  transmitter  is 
mounted  on  the  canopy  of  the  aircraft,  and  it  consists  of 
three  orthogonal  coils  aligned  to  the  aircraft's  x,  y  and  z 
axes.  An  alternating  current  is  applied  to  each  coil;  the 
resulting  magnetic  field  is  sensed  by  three  orthogonally 
mounted  coils  in  the  helmet.  This  receiver  senses  nine 
voltages  (each  receiver  coil  sensing  the  three  transmitter 
voltages).  The  voltages  are  amplified  by  preamps  in  the 
control  panel  and  multiplexed  onto  a  single  channel.  The 
signals  are  conditioned  and  converted  into  a  digital 
matrix.  By  comparing  voltages  (matrix  elements),  the 
angle  between  the  transmitter  and  receiver  can  be 
determined;  by  using  the  magnitude  of  the  voltages,  the 
distance  between  the  pair  can  be  found.  This  processing 
and  computation  is  accomplished  inside  the  SEA,  which  is 
based  on  a  Honeywell  HDP-5301  microprocessor  with  2K 
of  RAM  and  8K  of  PROM.  Only  about  3.2K  of  the  PROM 
is  currently  used.  The  HMS  OFP  computes  helmet 
position,  compensates  for  helmet  and  cockpit  metal 
(using  data  from  a  cockpit  mapping  done  early  in  the 
program),  computes  the  LOS,  and  conducts  a  continuous 
built-in-test. 

Digital  Terrain  Management  And  Display  System 

The  primary  purpose  of  the  DTMDS  is  to  provide  a 
display  of  topographical  maps  that  move  in  real  time  in 
relation  to  the  motion  of  the  vehicle  carrying  the 
DTMDS.  The  information  displayed  includes  terrain 
elevation  and  cultural  features  and  is  derived  from 
compressed  data  stored  on  a  magnetic  tape.  The  DTMDS 
positions,  scales,  and  orients  the  map  in  response  to 
instructions  from  the  pilot  or  an  external  computer.  The 
DTMDS  comprises  four  firmware-resident  OFPs  written 
in  the  Z8000  symbolic  instruction  set  (assembly 
language),  executing  on  separate  Z8001  microprocessors, 
and  exchanging  data  via  a  global  shared  RAM.  One 
design  goal  was  an  executive  common  to  all  four 
processors.  The  DMG  controller  controls  operation  of  the 
video  electronics,  processes  navigation  data  to  position 
the  map,  and  decodes  commands  to  adjust  map  scale, 
orientation,  and  other  optional  features.  The  symbol 
generator  generates  one  monochrome  video  output  and 
seven  color  digital  video  overlay  outputs.  The  mono¬ 
chrome  output  capabilities  include  flight  instrumentation 
data,  color  overlay  symbology,  as  well  as,  point  cultural 
or  mission  interest  features  positionally  correlated  with 
the  terrain  elevation  map  display.  The  tape  controller 
reads  compressed  map  data  off  the  tape,  transmits 
compressed  map  data  to  the  DMG  subsystem,  and 
transmits  point  feature  data  to  the  symbol  generator 
controller.  The  auxiliary  processor  provides  an  execution 
environment  the  Sandia  Inertial  Terrain-Aided 

Navigation  (S1TAN)  algorithm  which  correlates  map  data 
with  observed  data  to  compute  a  navigation  error 
estimate. 

Color  Map  Reader  System 

The  CMRS  provided  by  the  Bendix  Corporation's 
Flight  Systems  Division  consists  of  (1)  the  Color  Map 
Reader  (CMR),  (2)  the  Color  Multifunction  Display 


(CMFD),  and  (3)  the  CPDG.  The  CMRS  is  an  LRU 
intended  for  use  on  the  AH-60D  helicopter  program.  It 
produces  a  full-color  video  signal  that  can  be  displayed  on 
a  color  CRT.  The  video  signal  consists  of  a  high-contrast 
image  of  a  flight-navigational  moving  map  from  a  film¬ 
strip  produced  by  the  Defense  Mapping  Agency  (DMA). 
The  map  image  is  under  control  of  the  OFP  in  the  CMRS 
and  responds  appropriately  to  changes  in  information 
received  from  other  avionics  subsystems  via  the  1S53B 
Display  Multiplex  (DMUX)  bus  which  reflects  the 
aircraft's  current  position  and  heading.  The  CMRS 
utilizes  one  Z8002  microprocessor  and  16K  of  EPROM 
memory  of  which  7K  is  currently  used.  The  processor's 
more  significant  tasks  are  1SS3B  bus  interface  (remote 
terminal  mode  only),  map  centering,  map  rotation,  and 
map  to  raster  coordinate  data  transformation. 

The  CPDG  provides  a  monochromatic  text/video 
display  mix  that  has  been  modified  to  provide  a  color 
display  capability.  The  CPDG  video  signals  from  the  CMR 
(or  potentially  from  other  sources)  to  the  system  display 
device  generate  various  display  symbology,  text  overlays, 
and  map  video,  process  the  data  required  to  control  the 
CMR  and  generate  stroke-written  electronic,  flight- 
instrument  display  formats.  The  CPDG  utilizes  a  dual- 
MUX  interface,  a  symbol  generator,  and  the  necessary 
display  driver  circuitry.  Each  of  the  two  channels 
contains  two  Z8Q02  microprocessors  addressing  24K  of 
EPROM  memory  (expandable  to  32K)  and  2K  of 
scratchpad  RAM;  one  of  each  is  used  in  the  display 
function  processor  board  and  the  system  function 
processor  board  (AFTI/F-16  is  currently  utilizing  only  one 
channel,  or  two  of  the  four  Z8002s). 

The  CMFD  is  a  Bendix  developmental  unit  specially 
configured  for  AFTI/F-16  unique  requirements  and  is 
capable  of  stroke-generated  symbology,  raster-generated 
symbology,  or  a  combination  of  both.  The  CMFD  is  the 
key  LRU  of  the  set  in  that  it  provides  the  operator 
interface  to  the  logic  processes  of  both  the  CPDG  and 
CMR.  The  CMFD  includes  a  5x5-inch,  color,  CRT 
monitor  configured  for  hybrid  operation,  twenty  program¬ 
mable  pushbutton  switches  (push  and  hold)  located  along 
the  display  perimeter,  and  four  rocker  switches  used  (but 
not  dedicated)  to  control  text  brightness,  contrast, 
symbology  brightness,  and  a  special  function  associated 
with  mixing  radar  and  map  video  together.  The  CMFD 
uses  one  processor  to  control  the  video  signal  necessary 
for  the  display  and  transmission/reception  of  commands 
from  the  CPDG  over  two  RS232  ports. 

Fire  Control  Radar 

The  fire  control  radar  on  the  AFTI/F-16  is  the  Block 
15BX  AN/APG-66  used  on  the  Block  25  A  F-16C/D.  The 
entire  subsystem  (hardware  and  software)  was  developed 
by  the  Westinghouse  Electric  Corporation  (WEC).  The 
hardware  configuration  is  divided  into  the  following 
LRUs:  (1)  the  antenna,  (2)  the  low-power  radio  frequency 
(RF),  (3)  the  transmitter,  (4)  the  digital  signal  processor 
(DSP),  and  (5)  the  rack.  The  DSP  is  the  OFP  host.  The 
hardware  configuration  remains  unchanged  while  the 
software  received  considerable  attention  in  order  to  meet 
and  achieve  the  AMAS  requirements.  The  most 
significant  changes  to  the  FCR  OFP  were  modifications 
to  support  the  two  AFTI/F-16  unique  modes  which  are  the 
CUE  and  LARAP  modes.  CUE  mode  allows  the  FCR  to 
have  its  line  of  sight  driven  by  another  sensor  while 
LARAP  provides  a  limited  terrain-following  capability 
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(restricted  to  a  2%  grade  variation)  for  the  purpose  of 
supporting  the  demonstration  objectives  of  the  AFTI/F-16 
AMAS  Phase. 

Head-Up  Display 

The  HUD  is  a  combined  electro/optical  device  that 
provides  the  pilot  with  a  visual  display  of  essential  flight 
information.  This  information  is  superimposed  directly  in 
the  pilot's  LOS  through  the  use  of  a  transparent  display 
medium  called  a  combiner  glass.  The  combiner  glass 
provides  the  pilot  with  an  undistorted  forward  field  of 
view  by  focusing  the  display  symbology  to  infinity.  The 
symbols  represent  information  relating  to  the  attack, 
navigation,  weapon  delivery,  and  landing  modes  and  to 
essential  aircraft  performance  (including  but  not  limited 
to  altitude,  airspeed,  attitude,  and  heading).  The 
symbolic  information  is  conditionally  determined  by 
information  obtained  from  both  internal  (RSU)  and 
external  (1553  multiplex  bus  and  discrete)  sources.  The 
HUD  consists  of  three  LRUs:  (1)  the  Programmable 
Display  Unit  (PDU),  (2)  the  Rate  Sensor  Unit  (RSU),  and 
(3)  the  Electronics  Unit  (EU).  The  software  environment 
consists  solely  of  the  EU.  The  PDU  houses  the  CRT  unit 
assembly  and  the  associated  power  supply,  the  video¬ 
protect  circuits,  the  video-drive  circuits,  the  auto¬ 
brilliance  sensor,  and  a  wide-angle  conventional  coating 
combiner  glass-  The  EU  controls  the  PDU's  construction 
of  symbology  and  generation  of  text  with  computations 
based  on  external  information  received  through  either  a 
MUX  bus  (1553)  or  discrete  interface.  The  HUD  OFP 
resides  in  16K  of  EPROM  memory. 

The  RSU  contains  pitch,  yaw,  and  roll  gyros,  and  an 
accelerometer.  The  outputs  of  these  sensors  are  used  to 
compute  the  continuously  computed  impact  line  (CCIL)  of 
the  stream  of  bullets,  which  is  displayed  in  the  air-to-air 
gunnery  modes. 

AVIONICS  TESTING 

Four  AFTI/F-16  avionics  subsystems  were  tested: 
the  Enhanced  Fire  Control  Computer;  the  Advanced 
Stores  Management  Set;  the  Multifunction  Display  Set; 
and  the  Data  Entry/Cockpit  Interface  Set.  Each  avionics 
subsystem  was  tested,  as  necessary,  at  three  basic  levels: 
Unit/Module,  Integration,  and  Stand-Alone  Verification 
and  Validation.  The  amount  of  testing  necessary  to 
produce  acceptable  software  was  determined  separately 
for  each  avionics  subsystem.  The  driving  consideration 
was  the  number  and  the  degree  of  changes  made  to  the 
software.  Those  subsystems  that  underwent  the  greatest 
number  of  changes  were  subjected  to  the  most  thorough 
testing.  Limiting  factors  such  as  test  facility  availability 
and  capability  also  entered  into  the  determining  process. 
The  level  of  testing  accomplished  for  each  avionics 
subsystem  is  described  in  detail  below. 

Enhanced  Fire  Control  Computer 

The  EFCC  software  testing  methodology 
implemented  a  bottom-up  strategy  with  all  three  levels 
of  testing,  beginning  with  the  low-level  modules  and 
working  towards  a  totally  Integrated,  verified,  and 
validated  OFP. 

In  the  first  level  of  testing,  CPT&E,  the  low-level 
unita/modules  were  first  tested  in  isolation,  using  test 
driver  programs.  For  Phases  A  and  B,  this  was 


accomplished  on  the  Delco  CSE,  and  in-house  driver 
software  was  developed  and  used.  For  Phase  C,  the 
modules  were  both  developed  and  unit  tested  on  a 
MicroVAX  II  system,  again  using  in-house  software.  This 
level  of  testing  exercised  all  branches  of  the  logic  in  each 
module  and  was  performed  by  the  programmers  who 
implemented  the  software.  A  majority  of  the  logic, 
internal  interface,  and  compiler  discrepancies  were 
identified  and  subsequently  corrected  at  this  level. 

After  each  module  had  successfully  passed  CPT&E, 
the  test  procedures  and  results  were  signed  off  by  both 
the  programmer/tester  and  the  lead  software  engineer. 
These  results  were  then  included  in  the  modules'  unit 
development  folder  (UDF)  for  documentation  purposes. 

For  Phases  A  and  B,  this  level  of  testing  was 
performed  only  on  newly  linked  versions  of  the  OFP.  As 
the  OFP  matured,  the  changes  and  corrections  were 
implemented  by  adding  patches  to  the  OFP.  Patching 
was  preferred  to  relinking  due  to  the  high  cost  in  time 
and  money  required  by  a  relink.  A  relink  was  therefore 
performed  only  when  major  revisions  or  additions  were 
Implemented.  During  the  time  between  newly  linked 
OFPs,  the  unstructured  nature  of  the  patched  OFP  and 
low  availability  of  the  test  facilities  prohibited  the 
performance  of  CPT&E  on  patched  OFPs.  For  Phase  C, 
the  MicroVAX  II  system  provided  a  faster,  more 
economical  relink  capability,  and  therefore,  patched 
OFPs  were  not  required.  As  changes  and  corrections 
accumulated  and  a  new  OFP  became  necessary,  a  relink 
was  performed  and  CPT&E  was  subsequently  executed. 

Following  CPT&E  of  a  relinked  OFP,  or  release  of  a 
patched  OFP,  low-level  modules  were  progressively 
merged  (called  OFP  integration)  in  a  top-down  sequence 
to  produce  software  that  performed  an  increasing  number 
of  specified  functions.  This  was  accomplished  on  the 
MSIP  EFCC  STS  facilities  at  the  SIL,  and  was  performed 
by  the  lead  mechanization  engineer.  The  mainline 
control  routines  were  integrated  and  tested  first,  using 
stubs  in  place  of  modules.  The  stubs  were  then  replaced 
by  the  actual  modules  in  a  functional  sequence  until  the 
entire  program  had  been  integrated  and  tested.  This 
level  of  testing  focused  on  the  functional  compatibility 
and  completeness  of  the  internal  logic  and  interface 
between  the  modules  of  the  subsystem. 

Upon  completion  of  functional  integration  the  OFP 
was  formally  released  to  the  lead  test  engineer  for  stand¬ 
alone  verification  and  validation  testing.  The  lead  OFP 
development  engineer  provided  a  formal  release  memo 
which  described  the  OFP's  contents  and  known 
limitations.  The  OFP  functional  capabilities  were  then 
formally  verified  and  validated  according  to  the  system 
and  software  performance  requirements  specifications. 
For  most  functions  this  was  accomplished  at  the  MSIP 
EFCC  STS  in  the  SIL  with  test  procedures  developed  and 
performed  by  an  independent  group  of  software  test 
engineers.  At  this  level  of  test,  the  external  interfaces 
with  other  subsystems  were  provided  by  modeling  the 
other  subsystems  on  the  STS.  The  EFCC  also  provided 
MUX  monitor  and  patch  capabilities,  MUX  and  data 
recording,  external  discrete  controls,  and  simulated 
subsystem  displays  (MFDS  and  HUD).  These  facilities  and 
the  sophistication  of  the  software  models  allowed  the 
tester  to  observe  the  expected  outputs  from  the  EFCC  in 
response  to  specific  subsystem  and  pilot  inputs.  The 
AMAS  Preplanned  Target  (APPT)  weapon-delivery  mode 


51 


was  added  to  the  air-to-ground  component  of  the  EFCC 
for  AMAS.  Due  to  the  closed-loop  nature  of  the  APPT 
algorithm,  formal  V&V  testing  of  the  EFCC  required 
interaction  with  a  flight  control  system  and  airframe 
parameters  in  a  closed-loop,  full-cockpit  environment; 
therefore,  a  flight-control  system,  airframe  parameters, 
sensor  and  subsystem  models,  and  MUX/data  monitor  and 
recording  capabilities  were  necessary. 

Upon  completion  of  stand-alone  testing,  the  test 
engineer  formally  annotated  the  test  results  in  a 
Software  Verification  and  Validation  Stand-Alone  Test 
Report.  The  test  report  identified,  at  the  component 
level,  all  discrepancies  observed  during  the  testing 
period.  Each  discrepancy  was  further  described  by 
inclusion  of  the  test  procedure  section  which  failed,  and  a 
Discrepancy  Report  which  was  written  against  the 
problem. 

As  the  test  procedures  and  the  OFPs  matured,  an 
abbreviated  version  of  the  test  procedures  was  performed 
on  those  portions  of  the  OFP  which  had  not  changed, 
without  realizing  a  loss  of  confidence  in  the  test  results. 
The  test  procedures  were  abbreviated  by  eliminating 
redundant  test  steps,  and  performing  only  a  repre¬ 
sentative  cross  section  of  the  tasks  for  a  particular 
function.  Those  OFP  functions  that  had  changed  were 
tested  to  completion,  and  often  required  new  or  updated 
test  procedures.  There  were  three  exceptions  to  this 
retest  methodology.  For  each  OFP  release,  the  test 
procedures  for  SWIM,  fault  reporting,  and  APPT  (closed 
loop)  were  always  executed  to  completion  due  to  their 
flight  critical  characteristics. 


Due  to  the  patched  nature  of  the  ASMS  software, 
the  testing  consisted  of  the  functional  integration  of  each 
patch  to  the  baseline  OFP,  followed  by  formal  SAV&V 
testing  of  the  entire  OFP.  Unit-level  testing  had  been 
previously  performed  on  the  MSIP  baseline  OFP  and  was 
not  performed  on  the  unlinked,  patched,  AFTI/F-18 
baseline  OFP.  As  the  patched  versions  of  the  OFP  were 
released,  each  patch  was  functionally  examined  by  the 
lead  mechanization  engineer  on  the  MSIP  ASMS  STS  at 
the  SIL.  The  ASMS  STS  provided  subsystem  models,  MUX 
monitor  and  patch  capabilities,  MUX  and  data  recording, 
external  discrete  controls,  and  simulated  MFDS  displays. 
This  level  of  testing  verified  the  functional  imple¬ 
mentation  of  each  patch,  as  well  as  the  integrity  of  the 
unchanged  code. 

Following  integration,  the  OFP  was  formally 
released  to  stand-alone  verification  and  validation  testing 
by  the  lead  OFP  development  engineer.  A  formal  release 
memo  describing  the  contents  and  known  limitations  of 
the  OFP  was  issued  to  the  lead  test  engineer.  After  ail 
the  new  patches  had  been  functionally  integrated,  the 
capabilities  of  the  entire  OFP  were  formally  verified  and 
validated.  This  was  accomplished  by  an  independent 
group  of  software  test  engineers  using  test  procedures 
based  on  the  current  system  and  software  design 
requirements.  The  test  engineers  utilized  the  ASMS  STS 
facilities  to  verify  the  OFP's  expected  response  to  pilot 
and  subsystem  inputs.  As  with  the  EFCC,  the  results  of 
ASMS  stand-alone  testing  were  described  by  the  test 
engineer  in  a  Stand-Alone  Verification  and  Validation 
Test  Report. 


Multifunction  Dfaglu  3»t 

The  MFDS  OFP  is  a  data  intensive  display  generator 
with  a  large  display  data  base.  Due  to  the  data  intensive 
nature  of  the  software,  unit-level  testing  was  deemed 
inappropriate  and  was  bypassed  in  favor  of  integration 
and  formal  verification  and  validation  through  inspection 
of  each  display  page.  As  new  OFPs  were  released,  each 
patched  display  page  was  examined  for  functional 
correctness.  This  was  accomplished  on  the  Tektronix 
microprocessor  development  unit  at  the  SIL,  and  was 
performed  by  the  lead  mechanization  engineer.  By 
inspection  of  those  display  pages  changed  by  patches,  the 
integrity  of  both  the  display  data  base  and  the  display 
generator  was  verified. 

After  all  new  patches  were  integrated,  the  entire 
OFP  was  formally  verified  and  validated  by  ensuring  that 
ail  display  pages  were  correctly  generated  and 
functionally  operational  in  accordance  with  the  current 
design  specification.  This  was  accomplished  on  the  MSIP 
MFDS  STS  at  the  SIL  by  an  independent  group  of  software 
test  engineers.  The  MSIP  STS  provided  subsystem 
models,  MUX  monitor/patch  capabilities,  MUX/data 
recording,  external  discrete  controls,  and  MFDS  displays. 
These  facilities  allowed  the  tester  to  verify  that  the 
correct  page  was  displayed  in  response  to  subsystem  and 
pilot  inputs. 


The  DE/CIS  OFPs  were  based  on  mature  existing 
MSIP  OFPs.  Due  to  the  maturity  of  their  software,  MSIP 
no  longer  tested  their  OFPs  at  the  unit  level.  Instead, 
testing  consisted  of  functional  integration  of  each  patch, 
followed  by  formal  SAV&V  testing  of  the  entire  OFP. 
This  high-level  testing  methodology  was  also  imple¬ 
mented  for  the  AFTI/F-16  OFPs.  As  the  patched  OFPs 
were  released  from  development,  each  new  patch  was 
examined  for  functional  correctness.  This  was  accom¬ 
plished  at  the  MSIP  DEEU  STS  in  the  SIL,  and  was 
performed  by  the  lead  mechanization  engineer  on  the 
software  test  station.  Following  functional  integration  of 
the  new  patches,  the  functional  integrity  of  the  entire 
OFP  was  determined  according  to  the  current  system 
design  specifications.  This  was  accomplished  on  the  MSIP 
DEEU  STS  at  the  SIL,  and  was  performed  by  an 
independent  test  engineer. 

ACRONYMS  AND  ABBREVIATIONS 

ACIU  Advanced  Central  Interface  Unit 

ADIR  AMAS  Director 

AFTI  Advanced  Fighter  Technology  Integration 

AMAS  Automated  Maneuvering  Attack  System 

APPT  AMAS  Pre-Planned  Target 

ASMS  Advanced  Stores  Management  Set 

CCIL  Continuously  Computed  Impact  Lines 

rMFD  Color  Multifunction  Display 

CMRS  Color  Map  Reader  System 

CPDG  Color  Programmable  Display  Generator 

CPT&E  Computer  Program  Test  and  Evaluation 

CRT  Cathode  Ray  Tube 

CSE  Computer  Support  Equipment 

DCR  Design  Change  Request 

DEC  Digital  Equipment  Corporation 

DE/CIS  Data  Entry/Cockpit  Interface  Set 

DEEU  Data  Entry  Electronics  Unit 
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DFCS 

Digital  Flight  Control  System 

MUX 

Multiplex  Bus 

DMA 

Defense  Mapping  Agency 

OFP 

Operational  Flight  Program 

DMG 

Digital  Map  Generator 

PDG 

Programmable  Display  Generator 

DMUX 

Display  Multiplex  Bus 

PDU 

Programmable  Display  Unit 

DSP 

Digital  Signal  Processor 

PROM 

Programmable  Read  Only  Memory 

DTMDS 

Digital  Terrain  Management  and  Display 

RicE 

Research  and  Engineering 

System 

RALT 

Radar  Altimeter 

EEPROM 

Electrically  Eraseable  Programmable  Read 

RAM 

Random  Access  Memory 

Only  Memory 

RF 

Radio  Frequency 

EFCC 

Enhanced  Fire  Control  Computer 

RIU 

Remote  Interface  Unit 

EPROM 

Eraseable  Programmable  Read  Only  Memory 

RJE 

Remote  Job  Entry 

FCC 

Fire  Control  Computer 

RSU 

Remote  Station  Unit 

FCR 

Fire  Control  Radar 

SAIF 

Standard  Avionics  integrated  Fuze 

FCS 

Fire  Control  System 

SAV4cV 

Stand-Alone  Verification  and  Validation 

FLIR 

Forward-Looking  Infrared  Radar 

SCR 

Software  Change  Request 

GFE 

Government-Furnished  Equipment 

SEA 

Sight  Electronics  Assembly 

GLOC 

G-Induced  Loss-of-Consciousness 

SES 

Software  Engineering  System 

HMS 

Helmet-Mounted  Sight 

S1L 

System  Integration  Laboratory 

HUD 

Head-up  Display 

SITAN 

Sandia  Inertial  Terrain-Aided  Navigation 

ICD 

Interface  Control  Document 

SMS 

Stores  Management  Set 

IFF 

Identification  Friend  or  Foe 

SOW 

Statement  of  Work 

IFFC 

Integrated  Fire  and  Flight  Control 

STS 

Software  Test  Station 

IKP 

Integrated  Keyboard  Panel 

SWIM 

System-Wide  Integrity  Management 

I/O 

Input/Output 

TALOSS 

Target  and  Line-Of-Sight  Simulation 

LARAP 

Low-Altitude  Radar  Auto  Pilot 

TACAN 

Tactical  Air  Navigation 

LOS 

Line-of-Sight 

UDF 

Unit  Development  Folder 

LRU 

Line  Replaceable  Unit 

V4cV 

Verification  and  Validation 

MFDS 

Multifunction  Display  Set 

VIA 

Voice  Interactive  Avionics 

MIPS 

MSIP 

Million  Instructions  Per  Second 

Multinational  Staged  Improvement  Program 

WEC 

Westinghouse  Electric  Corporation 
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ABSTRACT 

The  Advanced  Fighter  Technology  Integration 
(AFTI)/F-16  Automated  Maneuvering  Attack  System 
(AMAS)  la  In  developaental  flight  teatlng  at  the 
Air  Force  Flight  Teat  Center  (AFFTC),  Edvarda  Air 
Force  Baae,  California.  AMAS  teatlng  comenced  in 
Septeaber  1984,  with  one  hundred  teat  aortlea 
totaling  158.8  flight  houra  flown  at  the  tlae  of 
thla  lnteria  report.  The  flight  teeta  are  being 
conducted  by  the  AFTI/F-16  Joint  Teat  Force,  which 
Is  coaprlaed  of  AFFTC,  NASA-Aaea  Dryden,  and 
General  Dynaalca  personnel. 

The  overall  thrust  of  the  developaental  flight 
test  prograa  la  to  develop  autoaated  guidance  and 
control  systeas  for  air-to-ground  and  air-to-air 
weapon  delivery.  The  developaental  test  bed  Is  an 
NF16-S/N  75-750  which  has  been  aodlfled  with  an 
asynchronous  digital  flight  control  systea,  dual 
avionics  aultlplex  buses,  an  advanced  forward 
looking  Infrared  sensor-laser  ranger  sensor. 
Integrated  flre/fllght  control  software,  advanced 
cockpit  displays/interfaces,  and  aodlfled  core  MSI? 
avionics.  This  paper  will  present  lnteria  flight 
test  results  pertaining  to  the  AMAS  developaent. 


ABBREVIATIONS 
ADIR  -  AMAS  Director 

AFTI  -  Advanced  Fighter  Technology  Integration 

AGL  -  Above  Ground  Level 

ALC  -  Automatic  Level  Control 

AMAS  -  Autoaated  Maneuvering  Attack  Systea 

APPT  -  AMAS  Pre-Planned  Target 

ASE  -  Aeroservoelastlclty 

DFCS  -  Digital  Flight  Control  System 

DSC  -  Digital  Scan  Converter 

FCC  -  Fire  Control  Computer 

FCR  -  Fire  Control  Radar 

PLIR  -  Forward  Looking  Infrared 

FOV  -  Field  of  View 

GCA  -  Ground  Collision  Avoidance 

HMS  -  Helaet  Mounted  Sight 

HUD  -  Head  Up  Display 

IFFC  -  Integrated  Fire  Flight  Control 

INU  -  Inertial  Navigation  Unit 

KCAS  -  Knots  Calibrated  Airspeed 

LARAP  -  Low  Altitude  Radar  Autopilot 

LRU  -  Line  Replaceable  Unit 

MDA  -  Minimum  Descent  Altitude 

MFD  -  Multifunction  Display 

MS1P  -  Multinational  Stage  Improvement  Prograa 

NWL  -  Non-Wings  Level 

PDRR  -  Pre-Determined  Release  Range 


RALT  -  Radar  Altimeter 

STS  -  Sensor  Trecker  Systea 

SWIM  -  Systea  Wide  Integrity  Management 

VPS  -  Vertical  Planning  Scale 

YAG  -  Yttrium  Aluminum  Garnet 

INTRODUCTION 

The  AFTI/F-16  AMAS  developaent  flight  test 
prograa  Is  Phase  II  of  the  overell  AFTI/F-16 
developaent/demonstretlon  prograa.  Phase  I  Digital 
Flight  Control  Systea  (DFCS) ,  conducted  between ' 
June  1982  end  July  1983,  developed  end  demonstrated 
a  new  asynchronous,  triplex,  digital  flight  control 
systea;  multi-mode  task  tailored  flight  control 
laws;  six  degree-of-freedoa  decoupled  action;  and 
new  pilot  vehicle  Interfaces. 

The  AFTI/F-16  flight  test  progrea  Is  being 
accoapllshed  by  the  AFTI/F-16  Joint  Test  Force, 
Edwards  Air  Force  Base,  California.  The  AFTI/F-16 
Joint  Test  Force  Is  coaprlsed  of  personnel  froa  the 
Air  Force  Flight  Test  Center,  NASA-Aaes/Dryden,  and 
General  Dynamics.  The  overall  AFTI/F-16  test 
prograa  Is  managed  by  the  AFTI/F-16  Advanced 
Developaent  Prograa  Office  (ADPO),  the  Air  Force 
Wright  Aeronautical  Laboratory  (AFWAL) ,  and  the  Air 
Force  Flight  Dynamics  Laboratory  (AFFDL) ,  Wright- 
Patterson  Air  Force  Base,  Ohio. 

PROGRAM  SUMMARY 

Scope  and  Objectives 

The  overall  scope  of  the  AFTI/F-16  test 
program  Is  planned  to  encompass  approximately  170 
total  test  missions  over  a  span  of  24  months.  The 
primary  program  objective  of  the  AFTI/F-16 
development  program  is  to  develop  and  deaonstrate 
new  technology  design  alternatives  for  future 
fighter  aircraft.  Specific  test  objectives  of  the 
AFTI/F-16  Phase  II  AMAS  flight  test  program  are  as 
follows: 

1.  Deaonstrate  the  weapon  delivery  capability 
and  quantify  accuracy  of  the  AMAS. 

2.  Assess  the  Increase  in  survivability 
during  the  weapon  delivery  phase  achievable  as  a 
result  of  the  AMAS  aaneuverlng  profile. 

3.  Determine  the  pilot  acceptance,  adapta¬ 
bility,  and  workload  associated  with  AMAS. 


4.  Demonstrate  eh*  weapon  delivery  capability 
:hl*vable  f roe  the  Integration  of  multi-sensor 

•g.  wing  atrake-wounted  FL1R,  HMS,  fire  control 
iJar,  and  radar  altimeter . 

5.  Eatabllah  design  criteria  and  recoamenda- 
lona  for  AMAS  technology  application  and  lntegra- 
on  of  aasoclated  technologies. 

The  above  major  objectives  are  the  main  reason 
>r  conducting  the  extensive  AFTI/F-16  flight  teat 
-ograa;  however,  the  vehicle  also  contains  slg- 
.flcant  technological  Improvements  In  specific 
ibsysteas  In  addition  to  their  integrated  usage 
>r  automatic  weapon  delivery.  A  series  of  sub- 
•Jectlves  has  been  established  to  collect  data 
mcernlng  their  performance  and  utility.  The 
ib-obJectlves  of  the  AMAS  flight  test  are  to: 
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1.  Demonstrate  the  target  acquisition/ 

'acklng  capability  of  a  wing  at  rake-mounted  sensor  Figure  1  AFTI/F-16  Flight  Test  Summary 

-acker  pod  In  maneuvering  weapon  delivery. 


2.  Demonstrate  the  off~bor*alght  target 
islgnatlon  capabilities  of  the  helmet  mounted 

ght  system. 

3.  Assess  the  cockpit  displays,  controls,  and 
rltchology  for  pilot  vehicle  Interface. 

4.  Demonstrate  low  altitude  radar  auto  pilot 
AIAP)  capabilities  at  low  altitude. 

5.  Validate  the  effectiveness  of  the  system 
d*  Integrity  management  (SWIM)  concept.  Including 
lllalon  avoidance. 


In  order  to  achieve  the  aforementioned  program 
jectlves,  the  AMAS  flight  test  development 
ogram  was  segmented  Into  two  distinct  stages; 
as*  A  -  uncoupled  manual  development  of  the 
r-to-ground  AMAS  ayatem,  ensuing  flight  envelope 
pension,  and  new  sensor  tracker  set  (STS)  forward 
oklng  Infrared  system  functional  checkout;  Phase 
-  coupled  automated  air-to-ground  and  alr-to-alr 
apon  system  development  Integrated  with  the  STS 
the  primary  target  sensor. 


The  overall  AMAS  test  program  has  been  In 
ogress  since  September  1984.  A  total  of  100  test 
rtles,  totalling  158. 5  flight  hours  have  been 
awn  to  date  In  development  of  AMAS.  Figure  l  and 
provide  a  summary  of  test  flight  hours  flown  and 
eclflc  test  developmsnt  activities  respectively, 
see  A  and  Phase  B  test  stnmurles  are  as  follows: 
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Figure  2  AMAS  Flight  Test  Summary 

Phase  A  commenced  In  September  1984  and  ended 
In  April  1985  with  a  total  of  41  test  sorties 
totalling  62.5  flight  hours.  Manual  air-to-ground 
AMAS  control  law  envelopes  were  developed,  system 
wide  Integrity  management  was  developed,  low 
altitude  radar  auto  pilot  was  demonstrated,  struc¬ 
tural  roll  rate  limiter  tested,  and  a  limited  STS 
development  and  BDU-33  bomb  envelope  cleared  for 
non-wings  level  (NWL)  delivery. 

Phase  B  commenced  in  June  1985  and  was  still 
In  progress  st  the  time  this  paper  was  written. 
Phase  B  test  activity  to  date  has  been  59  test 
sorties  totaling  96  flight  hours.  Major  test 
emphasis  In  Phase  B  has  been  In  coupled  air-to- 
ground  AMAS  envelope  development;  STS  air-to-ground 
tracking  with  laser  ranging;  AMAS  BDU-33  weapon 
delivery;  seroservoelastlclty  (ASE)  coupled  enve¬ 
lope  clearance;  air-to-ground  collision  avoidance 
SWIM  i»dng;  cockpit  display  evaluatlona;  and  the 
completion  of  structural  roll  rate  Halter  testing 
left  over  from  Phase  A. 
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TEST  ARTICLE  DESCRIPTION 


The  AMAS  phaee  of  the  AFTI/F-16  prograa  hat 
built  on  the  technologies  demon sc rated  In  the  DFCS 
phase  to  achieve  automated  maneuvering  weapon 
delivery.  Additional  sensors  were  added  to  acquire 
and  track  the  target,  determine  target  state 
Information,  and  measure  altitude  above  ground 
level.  The  Integrated  fire  and  flight  control 
(IPTC/  system  has  provided  automated  maneuvering 
weapon  delivery,  requiring  only  pilot  consent  for 
weapon  release.  A  SWIM  system  protects  against 
potentially  catastrophic  component /system  miscal¬ 
culations  or  failures  of  single  strand  components. 
The  pilot  will  be  able  to  maintain  tactical  situa¬ 
tion  awareness  and  keep  abreast  of  system  perfor- 
oance  through  enhanced  pilot-vehicle  Interface 
controls  and  displays. 

Tesc  Aircraft  Configuration 

The  AFTI/F-16  Is  a  highly  modified  F-16A 
aircraft.  The  modifications  Include  an  asynchro¬ 
nous  operation,  triplex  digital  flight  control 
system,  which  provides  multiple  in-fllght-selee- 
table  task-tailored  flight  control  laws.  Including 
slx-degree-of-freedom  decoupled  aircraft  motions. 
Vertlde  canards  are  mounted  from  actuators  in  each 
side  of  the  lower  portion  of  the  engine  Inlet.  A 
fuselage  dorsal  fairing  was  added  to  provide  more 
room  for  avionics  and  Instrumentation  hardware.  A 
10.5  Inch  diameter  forward  looking  Infrared  (FLIR)/ 
neodymium  (YAG)  laser  STS  Is  mounted  conformally  In 
the  right  wing  root  with  an  aerodynamlcally  similar 
'dummy  pod"  mounted  In  the  left  wing  root.  A 
nearly  'all  attitude'  radar  altimeter  la  installed 
utilising  a  four  antenna  pattern  around  the  forward 
fuselage.  See  Figure  3  for  overall  aircraft 
configuration.  A  helmet  mounted  sight  (HMS)  system 
Is  Installed  In  the  cockpit.  New  and  modified 
cockpit  controls  and  displays  include  a  redesigned 
sldestlck  controller  Incorporating  eight  switches, 
a  linear  motion  throttle  with  a  twist  action  grip 
for  controlling  longitudinal  decoupled  motion  and 
AMAS  functions,  a  conventional  optics  wide  fleld- 
of-vlew  head-up  display,  and  three  multifunction 
display  cathode  ray  tubes  for  system  control  and 
display.  See  Figure  4  for  cockpit  layout. 

AFTI/F-16  Technology  Demonstrator 
A  Proven  Testbed  tor  Advanced  Ideas 


Figure  3  AFTI/F-16  Aircraft  Configuration 


AMAS  Cockpit  Arrangement 
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Figure  4  AMAS  Cockpit 

The  core  avionic  hardware  and  software  for 
AMAS  Is  the  F-16  Multinational  Staged  Improvement 
Program  (MSIP)  system.  The  hardware  la  essentially 
unmodified  and  the  software  Is  highly  modified  to 
accomplish  AMAS  functions.  The  Integration  of 
sensors,  fire  control,  flight  control,  stores 
management,  and  cockpit  displays  la  accomplished 
through  a  bus  architecture  of  three  1553  multiplex 
buses  as  shown  In  Figure  5. 

The  AMAS  System  Derives  Its  Hardware  and  Software 
from  Three  Major  Sources 
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Figure  5  AMAS  Avionics  Multiplex  Bus  Configuration 

The  aircraft  la  very  heavily  instrumented 
which  provides  the  capability  to  conduct  multl- 
dlsclpllne  flight  tests  on  any  given  flight  or 
series  of  flights  with  no  hardware  or  software 
modifications  (t.e.  flying  qualities,  structural 
loads,  flutter,  aeroservoelasticlty ,  weapon  sep¬ 
aration,  avionic  subsystem  development  and  perform¬ 
ance,  and  AMAS  development  and  performance  data  can 
be  recorded  and  monitored  simultaneously).  The 
Airborne  Data  Acquisition  System  Includes  a 


14-track  aagnetic  tap*  recorder,  tlaa  correlation 
systea,  two  KM  subsysteas,  two  MUX  bua  Interface 
systems,  video  recorder  eye tea,  weapon  separation 
caaara  ayatea  and  a  taleaatry  systea.  The  total 
oo- board  recordlnf  capability  Includes  200  hard 
wired  data  paraaetara  (PCM  fl),  400  selected  A  and 
D  MUX  paraaetara  (PCM  #2),  total  A  and  D  MUX 
traffic,  audio,  and  one  video  channel.  The  talea- 
atry  systea  consiats  of  four  down  links  contin¬ 
uously  transmitted  to  the  (round.  Capability 
Includes  200  hard  wired  data  peraaeters  (PCM  #1), 
400  selected  A  and  D  MUX  paraaetara,  one  video 
channel  and  an  audio  channel.  All  of  these  are 
available  for  real  tlaa  monitoring  in  the  ground 
control  station. 

AMAS  Design  Mission 

It  la  apparent  that  our  potential  adversaries 
continue  to  produce  aore  sophisticated  and  capable 
surface  and  airborne  weapon  systeaa  imposing  an 
Increasingly  higher  threat  envlronaent.  We  aust 
counter  this  threat  by  alnlaislng  the  exposure. 

AMAS  la  designed  to  do  this  by  conducting  effective 
weapon  deliveries  from  less  predictable  flight  path 
aaneuvers  and  accomplishing  the  weapon  deliveries 
at  low  altitude  where  the  threats  are  lass  effec¬ 
tive.  The  prlaary  AMAS  objective  Is  to  do  this 
while  aalntalnlng  or  exceeding  previous  levels  of 
weapon  accuracy  and  with  no  Increase  In  pilot 
workload. 

The  AMAS  approach  la  to  conduct  alr-to-surfaca 
weapon  deliveries  out  of  a  curvilinear  flight  path 
at  very  low  altitudes  (200  ft  ACL).  The  design 
alsslou  la  separated  Into  three  distinct  parts: 
Ingress,  curvilinear  steering,  and  egress  (see 
figure  i).  Ingress  to  the  target  Is  accoapllshed 
with  the  assistance  of  the  LAIAP  for  altitude 
control  aad  destination  steering  for  aslauth 
control.  Upon  target  visual  identification,  the 
pilot  any  hand  the  target  off  froa  the  radar 
Inertial  navigation  systea  (IMS)  or  the  HM3  to  the 
forward  looking  Infrared  radar  (FLU),  lock  the 
fUK  on  the  target,  aad  engage  IfK.  Ingress 
continues  on  LAIAP  and  steering  sets  up  for  a 
curvilinear  weapons  delivery.  Based  on  aircraft 
poaltlon  aad  velocity  relative  to  the  target, 
weapon  belllatlcs,  and  predetermined  release  range 
(PDBI),  the  fire  control  computer  (PCC)  computes  a 
curvilinear  boublng  maneuver  with  load  factors  up 
to  S  "g"  which  will  achieve  a  weapon  delivery 
solution.  The  computed  maneuver  profile  la  sym¬ 
bolically  presented  In  a  vertical  planning  scale  In 
the  HUD  for  annual  control  of  curvilinear  boablng. 
In  automatic  operation,  the  PCC  sends  comaands  to 
the  DPCS  in  the  fora  of  bank  angle  aad  load  factor 
to  accomplish  the  computed  bombing  maneuver.  When 
IfK  la  engaged  the  pilot  need  only  to  coosent  for 
weapon  release,  and  the  weapon  will  released 
autoaatlcally  whan  the  computed  accuracy  of  the 
weapon  delivery  solution  satisfies  preset  criteria. 
Upon  release  of  the  weapon,  the  systea  lamedlatsly 
enters  an  egress  node.  Egress  consists  of  a 
descending  turn  to  the  ainlaua  descent  altitude 
(MDA)  that  the  pilot  hae  preselected.  Once  the  MDA 
Is  obtained,  the  pilot  resuaes  annual  aircraft 
control. 


AMAS 
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Figure  6  AMAS  Alr-to-Surface  Design  Mission 

When  conducting  missions  at  very  low  altitudes 
(down  to  200  feet  ACL),  the  prlaary  concern  Is 
quite  naturally  aircraft  and  systea  safety.  AMAS 
includes  two  unique  design  features  Intended  to 
enhance  aircraft  and  systea  safety.  SWIM  provides 
for  ground  and  target  colllson  avoidance  and  systea 
failure  monitoring.  Ground  collision  svoldance  Is 
baaed  on  the  concept  of  a  pilot-selectable  ainlaua 
descant  altitude  (l.e.  floor)  that  the  aircraft  Is 
not  allowed  to  penetrate.  Should  penetration  be 
predicted,  an  autoaatlc  5  "g"  fly-up  maneuver  Is 
activated.  In  air  coabat,  a  breakaway  maneuver  Is 
activated  when  a  ainlaua  avoidance  criteria  is 
violated.  SHIM  also  provides  systea  failure  monito¬ 
ring  through  the  use  of  subsystem  self  test, 
interactive  built-in  test,  and  PCC  and  DPCS  fault 
aonltors  which  provide  a  aeasure  of  systsa  oper¬ 
ating  Integrity.  SHIM  provides  a  rapid  assessaent 
of  situation  hasards  resulting  froa  malfunction  or 
miscalculation  or  the  subsystaas.  Based  on  these 
assessments,  timely  action  follows  to  provide  1)  a 
safe  recovery  froa  the  situation,  2)  detection  of 
suspected  subsystem,  3)  orderly  resumption  of 
annual  pilot  control,  and  4)  proper  Identification 
and  annunciation  of  faults.  The  use  of  a  SHIM 
systsa  Is  essential  in  the  case  of  the  AFTI/F-16 
where  aany  systems  and  sensors  that  control  coupled 
flight  are  only  single  strand. 

The  Integration  of  these  systeaa,  subsysteas, 
and  design  fsatures  has  provided  a  truly  automated 
aaneuverlng  attack  systea.  Since  the  AFTI/F-16 
project  is  an  advanced  technology  development/ 
demonstration  program.  It  wss  only  Intended  to 
validate  the  design  concept  and  not  produce  a 
production  ready  product.  Therefore,  AMAS  does 
have  soma  undesirable  limitations  (l.e.  ground 
collision  svoldance  operation  could  only  be  vali¬ 
dated  over  terrain  with  less  than  2  percent  slope 
because  the  systea  had  no  forward  looking  capebll- 
lty)  that  would  not  be  present  In  an  operational 
ready  systea. 


FLIGHT  TEST  USULTS 

Aircraft  Flight  Enveloge  CImimc* 

At  the  conclusion  of  the  DFCS  phase  of  tha 
flight  tost  program  tha  aircraft  had  bnsn  elaarod 
for  a  Mach/altltude/maneuver  flight  envelope 
essentially  tha  sane  aa  tha  F-16  flight  envelope, 
below  1.2  Mach.  This  elaarsBca  laclodad  tha  task 
tallorad  sodas  of  aoraal,  air-to-air  gun,alr-to- 
aurfaca  gun,  aad  air- to- surface  bomb. 

Tha  aircraft  aodlf icatloos  to  lastall  AMAS  la 
tha  aircraft  aad  tha  aodlflcatloea  to  Improve  DFCS 
oparatloo  for  AMAS  Invalidated  portlooa  of  tha  DFCS 
flight  envelope  clearance  requiring  ratast  or 
flight  envelope  expanaloo  tests  for  oev  nodes/ 
capabilities.  Tha  AMAS  aodlflcatlons  Included  MSIF 
core  avionics  hardware,  aodlf lad  MSIF  avionics 
software,  a  new  STS,  a  aodlf lad  radar  altlaatar 
(SALT),  low  altitude  radar  autopilot  (UIAF) 
software,  a  be last  aounted  sight  (HMS),  ANAS 
pre-planned  target  (AFFT)  algorithm  far  air-to- 
ground  ,  aad  aa  AMAS  director  (ADtt)  algorithm  for 
air-to-air.  The  DFCS  laproveaant  aodlflcatlons 
Included  one  hardware  change  aad  several  flight 
control  law  changes.  The  following  sections  detail 
tha  flight  envelope  clearance  flight  taste  accom¬ 
plished  to  provide  tha  flight  envelopes  presented 
in  Figures  7a  and  7b. 
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Figure  7a  AFTI/F-16  Flight  Envelope! 
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Figure  7b  AFTI/F-16  AMAS  Flight  Envelope 
Flight  DynasUcs 

Tha  addition  of  tha  pod  aounted  STS,  tha  DFCS 
rata  gyro  input  Impedance  change,  and  tha  DFCS 
control  law  changes  dictated  that  tha  aircraft 
flying  qualities  be  rechecked  throughout  tha  flight 
envelope,  including  high  angle  of  attack.  Predom¬ 
inantly  open  loop  maneuvers  ware  utilised  to 
reeheck  tha  normal,  air-to-surface  bomb  and  air-to- 
air  gun  flight  control  modes. 

Tha  STS  Installation  had  no  significant  effect 
on  flying  qualities,  buffet,  or  drag.  Mo  specific 
tests  wore  accomplished  to  quantify  buffet  or  drag, 
but  pilot  coaainta  Indicated  tha  effects  ware 
minimal.  Tha  aircraft  flying  qualltles/handllng 
qualities  ware  retested.  Including  high  angle  of 
attack,  with  no  degradation  noted  from  DFCS  flight 
test.  One  possible  small  adverse  affect  was  noted; 
angle  of  sideslip  during  rolling  aaneuvers  at 
midrange  angles  of  attack  Increased  approximately  2 
degrees. 

DFCS  flight  test  results  showed  that  maximum 
attainable  load  factor  and  aaxlaua  pitch  rate  were 
deficient.  Late  in  the  DFCS  test  prograa,  an  error 
was  found  In  the  Impedance  balancing  of  the  DFCS 
rate  gyros.  This  labalance  was  corrected  and  AMAS 
flight  tests  demonstrated  that  the  aajor  DFCS 
shortcomings  of  low  maneuvering  "g"  onset  rate  and 
low  attainable  load  factor  were  corrected. 

Phase  I  DFCS  results  showed  a  tendency  for 
the  pilot  to  overcontrol  in  the  roll  axis,  re¬ 
sulting  In  a  phenomenon  called  roll  ratcheting.  A 
variable  lead-lag  filter  was  added  to  the  lateral 
axis  of  the  DFCS.  AMAS  flight  tests  were  incon¬ 
clusive  but  Indicate  little  or  no  Improvement  In 
roll  ratcheting.  However,  at  high  speed  (>*30 
RIAS)  the  pilots  report  less  tendency  for  roll 
ratchet  than  the  F-16. 

Also,  DFCS  test  results  shoved  It  «•  possible 
to  depart  the  aircraft  from  controlled  flight  when 
rolling  In  combination  with  yaw  pointing  (roll 


:oupllng).  The  DFCS  wee  Modified  to  reduce  roll 
rate  coaaand  es  a  function  of  rudder  pedal  coaand 
ind  reduce  rudder  pedal  contend  as  a  function  of 
roll  rate  and  angle  of  attack.  AMAS  high  angle  of 
tttack  testa  deaonstrated  that  the  departure 
lusceptlblllty  problea  had  been  Improved. 

>  'MAS,  the  DFCS  was  Modified  to  autoaa- 
:lcally  Halt  roll  rate  coaaand  above  5.86  "g"  to 
reduce  structural  loads  (discussed  In  detail  under 
Structural  Loads).  Since  the  F-16  and  the 
VFTI/F-16  had  never  flight  tested  rolling  Maneuvers 
ibove  5 .86  "g“ ,  the  aircraft  flying  qualities  were 
:losely  Monitored  during  these  structural  loads 
:ests.  They  were  satisfactory  with  one  exception; 
>n  two  occaelons  when  elevated  load  factor  rolls 
/ere  conducted  In  the  transonic  speed  range  (0.96 
lach)  below  2 OK  altitude,  the  aircraft  exceeded  the 
flight  control  systeM  "g"  llalter  setting  by 
ipproxlaately  1.0  "g" .  It  appears  that  the  tran- 
tonlc  pltch-up  experienced  as  the  the  aircraft 
lecelerates  between  0.9S  and  0.92  Mach  (caused  by  a 
orward  center  of  pressure  shift)  Is  defeating  the 
>FCS  "g”  Halter  function.  The  "g"  Halter  la 
lesigned  to  Halt  pitch  coaaand  as  required  to 
■btaln  9.0  “g"  and  If  9.0  "g"  is  exceeded,  It  backs 
•ut  the  coaaand.  Apparently,  If  the  pltch-up  onset 
'ate  la  high  enough,  the  DFCS  coapensatlon  rate  la 
■ot  sufficient  for  the  dynamics  of  the  Maneuver. 

Ills  problea  Is  under  Investigation  at  the  present 
lae. 

■eroservoelastic  Tests 

The  development  of  these  advanced  taak 
alio red  control  nodes  and  three  functionally 
lfferent  closed  loop  automated  nodes  (LAXAP,  APPT, 
ad  ADIE)  dictated  that  flight  testa  be  conducted 
o  demonstrate  freedoa  from  ASE  Instabilities.  The 
sale  aircraft  structure  and  flight  control  surface 
tlffness  was  not  changed,  therefore  flutter  tests 
ere  not  required. 

The  DFCS  pitch  rate  gyro  lnpedance  change 
ad If led  the  pitch  channel  gains  sufficiently  to 
•quire  ASK  retest  of  the  basic  DFCS  aodas.  There 
•s  e  saell  decrease  In  damping  In  the  antlsya- 
•trlc  wing  tip  aiaslle  pitch  vibration  node. 

Ithln  the  aircraft  flight  envelope,  the  damping 
•vela  exceeded  0.03  damping  ratio  and  were  satls- 
ictory. 

ASE  flight  tests  were  conducted  In  LAXAP  end 
?FT  modes  across  the  allowable  speed  range  (aax- 
mae  speed  of  0.95  Mach/600  KCAS).  All  ASE  damping 
*vels  exceeded  0.03  daaplng  ratio  and  were  satla- 
•ctory.  ASE  flight  tests  In  ADIK  have  not  been 
inducted  ae  of  this  writing. 

:ructural  Loads 

The  prlaary  structural  loads  for  all  allowable 
-16  and  AFTI/F-16  Maneuvers  have  been  determined 
com  flight  test  data.  For  gross  weights  below  the 
Ircraft  design  weight  (22,500  lbs),  structural 
>ads  for  all  aaneuvers  tested  including  AFTI 
icullar  aaneuvers  (l.e.  flat  turn,  yaw  pointing, 
:e.)  remain  below  100  percent  design  Halt  load 
Ith  one  exception;  the  AFTI/F-16  Is  an  F-16A  FSD 


aircraft  and  has  a  slighty  lower  wing  bending 
aoaent  structural  load  Halt  (fuselage  bulkhead 
strength  Halt)  than  the  production  F-16A.  Above 
0.9  Mach  and  below  15K  feet,  the  allowable  gross 
weight  for  9.0  "g“  Is  reduced  by  1300  lbs,  and  the 
allowable  normal  load  factor  above  that  weight  is 
reduced  to  8.5  "g”. 

Structural  load  aonltorlng  during  automated 
APPT  operation,  LAXAP  operation,  and  SWIM  automated 
fly-ups  has  shown  that  the  loads  remain  well  within 
100  percent  design  limit  loads. 

The  automated  AD1R  air-to-air  mode  has  full 
control  authority  throughout  the  flight  envelope, 
the  same  authority  as  the  pilot.  The  F-16  and 
other  fighter  aircraft  have  handbook  restrictions 
against  rolling  at  elevated  normal  load  factors 
(normally  above  5.86  "g").  This  full  authority 
required  the  design  and  development  of  a  roll  rate 
limiter  In  order  to  maintain  9  "g"  automated 
air-to-air  maneuver  capability  and  keep  structural 
loads  within  Halts.  The  roll  rate  Halter  reduces 
DFCS  roll  rate  command  as  a  function  of  "g"  to 
maintain  wing  bending  aoaent/torsion  within  limits . 
The  Halter  dealgn/operatlon  was  validated  In  the 
AFTI/F-16  simulator  and  flight  test  Is  In  progress. 
Preliminary  test  results  show  that  the  limiter  does 
limit  roll  rate  aa  a  function  of  "g*  and  keeps 
structural  loads  within  limits;  however.  It  appears 
that  there  will  be  a  saall  area  In  the  lower  right 
corner  of  the  flight  envelope  where  rolls  above 
approxlaately  8.0  "g"  at  design  gross  weight  will 
not  be  allowed.  The  reason  for  this  limit  Is  the 
same  as  the  wing  bending  moment  limit  previously 
discussed.  The  addition  of  a  roll  maneuver  on  top 
of  the  symmetric  maneuver  Is  expected  to  make  the 
limit  slightly  aore  restrictive.  The  exact  Halts 
have  not  been  defined. 

The  control  law  design  flexibility  preaitted 
by  the  digital  flight  control  system  has  proved  to 
be  an  Invaluable  tool.  It  Is  now  possible  to 
tailor  aircraft  maneuver  capabilities  and  resultant 
structural  loads  to  a  specified  level  within  the 
strength  envelope.  This  cepablllty  can  be  used  In 
future  applications  to  more  efficiently  utilise 
aircraft  structural  capability.  The  AFTI/F-16 
prograa,  as  ws  know  It,  could  not  have  been  accom¬ 
plished  without  this  capsblllty. 

Weapon  Separation 

The  basic  F-16  BDU-33  weapon  separation 
clearance  was  no  longer  valid  due  to  AFTI/F-16 
aerodynamic  changes  (vertical  canards),  flight 
control  system  control  lav  changes  (six  degree-of- 
freedom  notion  and  maneuvering  flap  deflections), 
and  advanced  weapon  delivery  capebllltles  (curvi¬ 
linear  non-wings  level  elevated  load  factor  deliv¬ 
eries).  Nine  weapon  separation  clearance  runs  were 
sccoapllshed.  The  alrcrsft  is  cleared  to  release 
BDU-33  practice  bombs  within  the  following  Halts; 

+  180  deg  bank  angle,  0.5  to  5.0  *g",  0  "g"  lateral 
acceleration,  +  1.0  deg  sideslip,  0  deg/sec  roll 
rate,  and  +  10  deg  angle  of  attack. 
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Alr-to-0 round  AMAS  System 

The  air- co-ground  AMAS  flight  test  development 
consisted  of  envelope  clearance  of  syatea  subaode 
features  that  when  Integrated  provided  the  APPT 
systea.  The  subaode  or  systea  tests  that  supported 
APPT  development  were:  LARAP  for  Ingress  and 
egresa;  SWIM  for  aircraft  systea  status  and  state; 
APPT  guidance  and  control  for  curvilinear  deliver¬ 
ies;  and  Integrated  APPT  weapon  delivery  perform¬ 
ance. 

Overall,  automated  APPT  systea  performance  has 
been  consistent,  repeatable,  and  reduced  pilot 
workload  during  the  curvilinear  portion  of  the 
weapon  delivery.  Halted  manual  deliveries  have 
been  evaluated  using  APPT  displays,  but  It  should 
be  noted  that  aanual  APPT  deliveries  aay  be  as 
consistent  and  repeatable  as  the  automated  taak  but 
only  at  the  expense  of  Increased  pilot  workload  and 
reduced  tactical  situation  awareness. 

The  following  sections  provide  specific  test 
results  pertaining  to  APPT  systea  subaode  and 
weapon  performance  development. 

Low  Altitude  Radar  Auto  Pilot  (LARAP) 

The  LARAP  systea  performance  has  been  adequate 
over  flat  terrain  (terrain  elevation  changes  of 
less  than  2  deg  slope)  during  wlngs-level  flight. 
The  systea  has  demonstrated  low  damping  when 
acquiring  a  reference  altitude.  Pilots  have  noted 
a  rough  ride  quality  when  using  LARAP  over  rolling 
terrain.  To  date,  performance  of  LARAP  during  - 
elevated  bank  angles  has  been  poor  with  the  control 
systea  not  rolling  out  enough  to  counter  descent 
rates  causing  large  (200  ft)  penetrations  of 
desired  altitude.  Future  control  law  developaent 
looks  promising  and  should  correct  this  problem. 

Pilot  blending  was  evaluated  and  was  Judged 
adequate  In  roll  but  sensitive  in  the  pitch  nose 
down  direction.  The  LARAP  systea  has  been  cleared 
for  operation  in  the  following  envelope:  airspeed 
267-550  KIAS ,  500  feet-20K  feet  ACL  with  360  deg 
rolls . 

In  suomary,  LARAP  performance  has  been  as  good 
as  can  be  expected  for  a  systea  with  no  look-ahead 
capability  for  changing  terrain  features.  Testing 
on  the  AFTI/F-16  has  proved  that  a  system  with 
look-ahead  capability  Is  mandatory  for  a  low 
altitude  autopilot. 

Systea  Wide  Integrity  Manageaent  (SWIM) 

The  SWIM  system  has  performed  Its  design 
function  satisfactorily.  These  functions  Include: 
monitoring  of  sensor  data  and  sensor  selection, 
subsystea  failure  detection  and  monitoring,  air¬ 
craft  state  monitoring  and  corresponding  restric¬ 
tions  for  IFFC  operation,  and  fault  reporting. 

SWIM  was  robust  as  well  as  being  conservative 
when  envelope  design  limits  were  approached.  It 
either  disconnected  APPT/LARAP  and/or  generated 
aircraft  flyups.  One  case  of  this  conservative 
nature  worth  mentioning  was  the  high  rate  toggling 


(50  Ha)  between  the  fire  control  radar  (FCR)  and 
RALT  senaor  data  for  source  selection.  This  would 
consistently  cause  system  disengagements.  All 
other  functions  performed  by  SWIM  worked  In  a 
desirable  manner. 

The  SWIM  concept  has  proven  to  date  to  be  a 
reliable  aeans  of  providing  an  Increased  artificial 
level  of  avionics  redundancy  with  regard  to  single 
strand  computers  and  sensors  Integrated  with  a 
triply  redundant  flight  control  systea.  SWIM  has 
reduced  rlska  of  flight  tests  of  AMAS. 

Ground  Collision  Avoidance  (CCA):  Initial 
flight  test  developaent  of  the  empirically  derived 
GCA  flyup  algorithm  demonstrated  problems  with 
penetrations  of  minimum  descent  altitude  (MDA). 

MDA  penetrations  of  up  to  350  feet  occurred  due  to 
slow  "g"  onset  rates  at  flyup  Initiation.  The  *g* 
onset  rates  were  Increased  by  altering  several 
prefilters  In  the  control  laws.  This  minimized  MDA 
penetrations;  however,  small  penetrations  were 
still  experienced.  Algorithms  were  altered  to  be 
more  conservative  and  to  provide  a  flyup  Initiation 
altitude  equivalent  to  a  one-second  pilot  reaction 
time.  This  reaction  time  was  defined  by  alnlaum 
above  ground  level  (ACL)  altitude  divided  by 
vertical  velocity  at  flyup  Initiation. 

These  changes  to  the  GCA  algorithm  have 
fundamentally  resolved  any  MDA  penetrations  with 
GCA  exhibiting  a  conservative,  reliable,  and 
predictable  performance. 

GCA  was  evaluated  on  various  combinations  of 
airspeed,  dive  angle,  roll  angles,  roll  rates,  load 
factors,  and  gross  welght/CG's.  Data  show  Increas¬ 
ed  conservatism  (larger  altitude  pad)  at  envelope 
extremes.  Alternate  sensor  configurations  were 
evaluated  for  GCA  using  RALT  and  FCR  as  AGL  sen¬ 
sors;  however,  the  FCR  mechanization  proved  Inade¬ 
quate  as  a  source  for  AGL  data  at  bank  angles 
greater  than  15  degrees.  No  development  was 
attempted  on  the  FCR  for  this  application. 

Overall,  61  test  runs  on  the  developed  GCA 
algorithm  have  been  flown  to  date  with  no  MDA 
penetrations  attributed  to  system  performance.  Two 
MDA  penetrations  did  occur  Inadvertently  but  were 
explained  due  to  a  pilot  Input  on  one  and  outside 
GCA  design  limits  on  the  second.  Ninety  percent  of 
all  runs  down  to  500  ft  AGL  have  demonstrated  a 
minimum  flyup  Initiation  reaction  time  of  .8 
seconds,  which  was  what  was  desired  by  the 
AFTI/F-16  pilots.  The  .8  second  minimum  reaction 
time  Is  the  time  allowed  after  which  the  pilot  must 
initiate  a  5  "g"  pull  to  avoid  MDA  penetration. 

The  smallest  margins  of  recovery  altitude  above  MDA 
and  minimum  reaction  times  were  at  hlj  airspeed 
and  low  dive  angles. 

APPT  Control  Law  Development 

Three  separate  control  laws  are  used  In  an 
APPT  delivery:  Ingress,  curvilinear,  and  egress. 
These  control  laws  were  tested  both  separately  and 
In  a  combined  sense.  The  characteristics, 
complexity,  and  development  of  these  control  laws 
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were  all  different,  and  the  level  of  refinement  Is 
different  for  each. 


Becauae  of  this,  pilots  preferred  the  automated 
system  over  the  manual  system. 


Ingress  steering  was  the  most  simplistic  of 
the  three  control  laws.  The  pitch  axis  was  con¬ 
trolled  by  LARAP,  Its  function  being  to  maintain 
constant  AGL  altitude.  Ingress  performance  was 
adequate  for  level  terrain  but  had  the  same 
problems  associated  with  LARAP  (see  LARAP  test 
results  for  further  details).  The  Ingress  roll 
axis  was  similar  to  LARAP  but  Included  the  added 
task  of  acquiring  the  appropriate  heading  for  the 
setup  of  curvilinear  steering.  The  basic  roll  axis 
also  had  the  same  problems  as  LARAP;  allowing  as 
much  as  200  feet  of  altitude  loss  during  high  bank 
turns  when  correcting  for  large  target  bearing 
errors.  At  the  writing  of  this  paper  a  change  to 
the  LARAP  roll  axis  has  been  made  which  ahould 
correct  this  problem.  Ingresa  steering  also  used 
flat  turn  for  the  final  angular  correction.  The 
performance  of  flat  turn  was  adequate  for  making 
these  small  corrections.  Both  the  roll  and  flat 
turn  of  Ingress  steering  were  well  damped  and 
demonstrated  no  tendencies  for  overshoots.  The 
ride  quality  of  Ingress  steering  was  satisfactory 
In  pitch  and  roll  with  crisp  aggressive  responses. 
The  ride  quality  of  flat  turn  on  the  other  hand  was 
not  satisfactory.  Pllota  found  that  when  control¬ 
led  manually,  flat  turn  was  not  uncomfortable  and 
proved  very  useful.  During  coupled  flight,  the 
pilot  had  little  Indication  to  anticipate  flat 
turn.  Also,  flat  turn  Is  an  unnatural  aircraft 
response  (sldeforce),  and  when  performed  automatic¬ 
ally  It  proved  unsettling  to  the  pilot.  Plat  turn 
will  continue  to  be  developed  for  more  acceptable 
ride  quality. 

Curvilinear  development  resulted  In  a  rela¬ 
tively  robuat  and  consistent  weapon  delivery 
system.  All  responses  were  well  damped  and  attain¬ 
ed  desired  values  (load  factor,  roll  rate,  bank 
angle)  with  a  fair  degree  of  accuracy.  Last  minute 
target  Jumps  of  up  to  1500  feet,  seconds  before 
release,  could  be  withstood  and  still  result  In 
successful  deliveries.  Only  diving  deliveries 
resultlog  In  recovery  altitudes  close  to  the  MDA 
demonstrated  less  than  acceptable  success.  This 
deficiency  was  primarily  due  to  Inaccuracies  In  the 
delivery  profile  prediction  coupled  with  the  GCA 
system.  The  APPT-calculated  profile  release 
condition  was  below  the  MDA  and  thereby  aborted  the 
APPT  bombing  pass.  The  most  significant  develop¬ 
mental  change  to  curvilinear  steering  was  changing 
from  a  maneuver  centered  about  the  target  to  a 
maneuver  centered  about  a  balllstlcally  determined 
point  above  the  target.  Prior  to  this  change, 
deliveries  were  inconslstant  especially  in  the  case 
of  lofting  deliveries.  The  ratio  of  aborted 
deliveries  to  successful  was  on  the  order  of  one 
out  of  five  prior  to  the  change,  whereafter  this 
ratio  was  around  one  out  of  fifteen. 

After  the  change,  the  ride  quality  of  curvi¬ 
linear  steering  was  acceptable  with  "crisp"  roll 
and  "g"  onsets.  The  pilot  could  also  blend  with 
curvilinear  steering  to  alter  the  delivery  profile. 
Although  blending  was  possible.  It  was  difficult 
due  to  Inadequate  displays  and  an  unsatisfactory 
flat  turn  response  caused  solely  by  the  blending. 


Egress  to  date  has  had  very  little  success. 

The  egress  control  laws  were  very  similar  to  LARAP 
and  because  egress  always  used  high  bank  angles.  It 
performed  poorly  due  to  LARAP 's  shortcomings  at 
these  conditions;  however,  with  changes  being 
Implemented  at  the  writing  of  this  paper,  egress 
performance  Is  expected  to  be  greatly  Improved. 

The  ride  quality  of  egress  was  considered  good 
during  Its  Initial  roll  and  pull  maneuver  but  Its 
steady  state  decent  was  too  gradual.  At  the 
writing  of  this  paper  a  more  aggressive  egress  has 
been  Implemented  but  has  not  yet  been  evaluated. 

At  Its  best,  egress  must  live  with  the  LARAP  2 
percent  terrain  slope  limitation.  With  a  look¬ 
ahead  capability,  an  automatic  egress  as  Implemen¬ 
ted  on  the  AFTI/F-16  could  be  very  useful. 


Sensor  Develop 


The  AMAS  design  added  three  new  sensors  to  the 
aircraft.  A  modified  F-16  RALT  system  was  In¬ 
stalled  for  accurate  AGL  Information  at  any  bank 
angle  for  operation  In  LARAP.  A  new  FLIR/laser  STS 
was  Incorporated  to  provide  accurate  target  posi¬ 
tion  data.  A  HMS  was  Installed  in  the  cockpit  for 
the  pilot's  use  In  cueing  the  STS  to  the  target. 


Radar  Altimeter  (RALT) 


The  RALT  Installation  Includes  four  antennas 
located  90  deg  apart  around  the  fuselage  that  are 
switched  as  a  function  of  roll  angle  to  provide  AGL 
altitude  data  through  360  deg  roll  angle.  RALT 
performance  data  was  collected  during  steady  state 
and  dynamic  maneuvers  at  altitudes  down  to  500  ft 
ACL  and  was  found  to  be  reliable  and  consistent. 

The  maximum  measured  error  (RALT  vs.  phototheodo- 
llte  data)  was  30  ft  high,  l.e.  the  RALT  Indicates 
30  ft  higher  than  the  aircraft  really  Is.  This 
error  was  a  function  of  pitch  angle.  There  were  no 
measured  errors  as  a  function  of  speed,  altitude 
roll  angle,  or  antenna  switching.  At  0  deg  pitch 
angle,  RALT  error  was  near  zero;  and  as  pitch  angle 
Increased,  the  RALT  error  Increased  In  a  smooth  and 
consistent  pattern.  During  all  testing  (rolls  and 
dynamic  elevated  load  factor  maneuvers),  the  RALT 
antenna  switched  smoothly  with  no  noticeable  effect 
on  performance.  The  RALT  has  supported  LARAP, 

IFFC,  and  ground  collision  avoidance  flight  tests 
with  consistent  reliable  operation.  RALT  operation 
above  5K  AGL  Is  somewhat  limited  but  does  not 
Impact  project  goals. 


The  Integration  of  RALT  Into  AMAS  resulted  in 
some  system  integration  problems.  The  AGL  rate 
output  from  RALT  had  occasional  one  frame  dropouts 
that  resulted  In  nuisance  DFCS  single  failures  when 
flying  the  system  closed  loop  In  LARAP  mode.  Since 
the  DFCS  is  an  asynchronous  system  (operates  with 
time  skew  between  computers),  it  was  possible  for 
two  computers  to  see  the  AGL  rate  dropout  and  the 
other  one  not  to  see  it  in  the  same  frame.  This 
resulted  In  a  large  difference  between  computers  in 
total  computed  output  to  the  flight  control  sur¬ 
faces.  The  DFCS  redundancy  management  system 
monitors  total  computed  output  commands,  compares 
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them;  and  If  they  differ  by  more  than  approxlaately 
IS  percent  of  full  eurface  travel,  tne  offending 
coaputer  la  voted  off  line.  Early  In  LARAP  flight 
test,  this  happened  several  tlaes.  The  fault  was 
reset,  and  the  flight  continued.  The  problea  was 
corrected  by  installing  two  software  aodlf icatlons 
In  AMAS.  A  filter  was  installed  In  the  PCC  to 
Halt  the  aagnltude  of  the  AGL  rate  change  In  one 
fraae  to  a  specified  value.  This  would  Halt  the 
change  In  DECS  total  coaputed  output  coaaands  to  a 
•nailer  value.  The  LARAP  control  laws  In  DECS  had 
an  Iteration  rate  of  32  Ht.  This  rate  was  changed 
to  64  Hs  which  decreased  the  probability  of  the 
DPCS  computers  alscoaparlng.  LARAP  has  been 
extensively  flight  tested  subsequent  to  these 
changes  and  the  anoaaly  has  not  reoccurred. 

Early  In  LARAP  flight  test,  It  was  deteralned 
that  RALT  does  not  have  an  ACL  rate  output  at 
altitudes  greater  than  5K  ACL.  Implementation  of 
ACL  rate  data  was  changed  such  that  Inertial 
vertical  velocity  was  used  above  5K,  blended  with 
RALT  ACL  rate  between  5K  and  3K,  and  RALT  ACL  rate 
used  below  3K  AGL .  This  Implementation  produced 
satisfactory  results  and  made  LARAP  usable  above  SR 
altitude.  Other  early  LARAP  flight  test  showed 
LARAP  to  have  much  less  damping  In  the  pitch  axis 
than  was  anticipated  through  simulation.  It  was 
found  that  no  attention  had  been  paid  to  the 
dynamic  response  to  altitude  change  of  the  RALT. 
After  the  appropriate  dynamic  characteristics  had 
been  modeled,  LARAP  was  modified  to  compensate  for 
the  altitude  lag  of  the  RALT  and  appropriate 
damping  resulted. 

Sensor  Tracker  System 

The  Weatlnghouse  STS  consists  of  three  line 
replaceable  units  (LRUs)  -  the  STS  head,  conform¬ 
ally  mounted  In  the  right  strake;  the  processor, 
Installed  In  the  dorsal  bay;  and  the  auxiliary 
power  supply.  Installed  In  the  right  side  Inlet 
bay.  The  STS  Is  an  Integrated  FLIR  sensor,  laser 
ranger,  processor,  and  closed  loop  tracking  system 
which  was  designed  to  complement  the  fire  control 
functions  of  the  AFTI/F-16  avionics.  The  FLIR 
utilizes  Infrared  radiation  emitted  naturally  by 
all  objects  to  produce  a  TV-dlsplay-corapatlble 
Image  of  the  tempt-  ature  differences  In  the  scene. 
The  FLIR  has  three  flelds-of-vlew  (FOV)  selectable 
by  the  pilot.  The  laser  ranger  operates  In  two 
modes.  A  narrow  beam  air-to-ground  mode  and  a  wide 
beam  air-to-air  mode.  The  STS  capabilities  In¬ 
clude:  1)  tracking  of  air-to-ground  and  alr-to-alr 

targets,  2)  accurate  target  llne-of-slght  measure¬ 
ments,  3)  FLIR  video  Imaging  of  target,  4)  accurate 
laser  ranging  at  low  grazing  angles,  and  5)  accu¬ 
rate  target  state  estimates  of  position,  velocity, 
and  acceleration. 

The  Initial  step  was  a  functional  test  where 
the  STS  acquired  and  tracked  a  ground  target.  STS 
video  quality,  target  acquisition,  sensor  control, 
and  tracking  capabilities  were  evaluated.  Next, 
automated  wlngs-level  and  curvilinear  air-to-ground 
weapon  delivery  runs  were  accomplished  to  evaluate 
STS  llne-of-slght  measurements  and  target  state 
calculations  using  INS  Information  for  slant  range. 
The  next  step  was  to  Integrate  the  laser  ranger  for 


slant  range  target  Information.  The  last  step  was 
a  demonstration  of  the  STS  during  APPT  weapon 
delivery  teat. 

Several  problems  were  encountered  in  STS 
flight  test  that  required  correction/development . 

In  general,  the  STS  has  supported  AMAS  flight  teat 
very  well,  when  you  consider  that  Its  first  flight 
was  in  April  1985.  The  STS  development  Improve¬ 
ments  Included  video  Image  quality,  tracking,  pitch 
stability,  laser  range,  system  reliability,  and 
mechanization  changes.  The  following  paragraphs 
discuss  STS  problems  encountered  during  flight  test 
and  how  they  were  corrected. 

Early  In  flight  teat  It  was  recognized  that 
the  video's  automatic  level  control  (ALC)  In  the 
tracker  was  marginal  and  waa  suspected  of  causing 
tracking  problems.  The  ALC  histogram's  resolution 
algorithm  was  expanded  from  6  bit  to  8  bit  to 
Improve  the  auto  level  control  and  thermal  refer¬ 
ence  control.  This  change  Improved  brightness 
stablllty/vldeo  Image  quality.  Tracking  perform¬ 
ance  waa  also  affected  by  non-reliable  operation  of 
the  digital  scan  converter  (DSC).  The  solder 
joints  on  leadlesa  chip  carriers  have  been  a 
continuous  source  of  trouble  requiring  an  abnormal 
amount  of  maintenance.  These  DSC  problems  result 
In  various  forma  of  line  structure  across  the 
video.  A  new  technique  to  add  solder  post  legs  to 
the  leadless  chip  carrier  Is  In  the  works.  The  STS 
tracking  performance  has  supported  flight  test 
goals  but  additional  Improvements  are  needed. 

STS  head  stability  has  affected  the  ability  of 
the  pilot  to  control  the  STS  during  target  acquisi¬ 
tion.  Head  stability  has  not  been  a  problem  when 
locked  on  a  target.  Head  stability  was  most 
affected  when  the  aircraft  was  maneuvered  (even 
small  maneuvers)  and  when  acquiring  a  target  left 
or  right  of  the  aircraft.  As  target  relative 
bearing  Increased,  pilot  workload  during  target 
acquisition  Increased.  An  Improvement  In  head 
stability  was  made  by  replacing  the  HUD  pitch  rate 
Input  with  a  calculated  pitch  rate  based  on  IVU 
pitch  attitude  change.  The  HUD  pitch  rate  has  a 
time  delay  that  rendered  It  Ineffective.  An 
additional  change  is  In  work.  Time  line  execution 
within  the  STS  operation  flight  program  (Input 
processing  of  beading  change)  Is  being  Improved. 

The  major  head  stability  deficiencies  are  caused  by 
time  delays  between  aircraft  maneuvering  and  STS 
head  response. 

Initially,  the  laser  had  serious  performance 
deficiencies  during  ground  test  and  flight  test. 

The  laser  would  not  range  at  ranges  below  approx¬ 
imately  3500  feet,  and  had  marginal  ranging  success 
against  low  reflective  targets  at  longer  ranges. 
Investigation  In  the  laboratory  revealed  the  laser 
had  backscatter  from  the  optics  reflected  into  the 
receiver.  The  backscatter  was  caused  by  laser 
energy  reflections  from  damaged  lens  coatings.  The 
backscatter  blinds  the  receiver  for  a  short  time 
and  lowers  the  receiver  gain.  A  side  effect  of 
this  was  noted:  at  short  ranges,  the  laser 
reported  zero  range  to  the  FLIR  causing  It  to 
unlock . 
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Since  there  le  no  requlreaent  for  air-to- 
ground  laser  ranges  less  than  1000  feet,  the  STS 
was  programmed  not  to  accept  laser  ranges  less  than 
1000  feet.  As  a  temporary  resolution  for  ranging 
on  low  reflective  targets,  the  target  was  augmented 
with  a  aore  reflective  surface.  This  resolved  the 
short  tera  goal  of  utilizing  laser  range  for  AMAS 
developaent.  Re-coating  the  optical  lenses  was  not 
an  option  because  the  project  has  only  one  STS,  and 
this  would  put  It  out  of  service  for  soae  tiae.  A 
aodlflcatlon  has  been  aade  to  the  laser  and  will  be 
tested  soon.  The  receiver  was  modified  to  decrease 
the  recovery  tlae  of  the  laser  threshold  detector. 
Also,  an  Increased  receiver  gain  should  provide  for 
ranging  on  lower  reflective  targets. 

As  experience  was  gained  by  the  pilots,  it  was 
determined  that  the  STS  aechanization  was  not 
optlaua  for  use  In  flight.  The  f leld-of-view  (F0V) 
switching  order  was  aechanized  to  go  froa  wide  to 
medium  to  narrow.  Target  acquisition  and  tracking 
was  best  accoapllshed  In  narrow  F0V  and  as  range 
decreased  switch  to  medium  and  wide.  Mechanization 
was  changed  to  allow  this.  The  scaling  of  the 
cursor  controlling  STS  llne-of-alght  was  not 
optimum  and  made  target  acquisition  difficult. 
Installation  of  pilot  selectable  scaling  Improved 
the  acquisition  task.  In  addition,  the  FCC  OFT  Is 
being  modified  to  give  the  pilot  selectable  cursor 
gains.  One  of  the  pilot  selectable  video  display 
formats  was  'track  up*.  The  display  was  oriented 
with  aircraft  track  (heading)  at  the  top  of  the 
screen.  When  tracking  a  target  with  a  substantial 
relative  bearing,  the  display  was  confusing  to  the 
pilot  because  the  target  orientation  was  rotated 
from  the  vertical  an  amount  equal  to  the  relative 
bearing  (l.c.  a  relative  bearing  of  90  deg  rotated 
the  target  display  90  deg).  'Track  up*  was  changed 
to  ’sky  up'  and  target  orientation  was  always 
aligned  with  the  horizon. 

Helmet  Mounted  Sight 

The  Honeywell  helmet  mounted  sight  (HMS) 
Installation  consists  of  four  line  replaceable 
units:  helmet  mounted  unit,  transmitter,  control 
panel,  and  sight  electronics  assembly.  The  func¬ 
tion  of  the  HMS  Is  to  provide  the  capability  to  cue 
the  STS  to  off  boreslght  ground  targets  and  to 
Increase  the  speed  and  ease  of  acquiring  airborne 
targets  by  cueing  the  radar  and  STS.  It  has  been 
demonstrated  In  flight  test  that  the  HMS  Is  capable 
of  successful  'hand  offs*  to  the  radar  and  STS; 
however,  at  the  present  stage  of  development,  the 
results  have  not  been  acceptable  due  to  boreslght 
errors. 

The  HMS  has  successfully  cued  the  radar  to 
alr-to-alr  target  llne-of-sight  within  the  radar 
glmbal  limits  resulting  In  radar  lockons;  however, 
HMS  cueing  of  the  STS  has  been  unsatisfactory. 
Successful  "’S  'hand  offs"  require  the  pilot  to 
'slew'  the  STS  acquisition  gate  over  the  target  by 
moving  his  head  after  designate,  while  monitoring 
the  FLIR  video.  This  technique  Is  not  satisfactory 
for  operational  use.  HMS  reverse  cueing  errors 
from  radar  targets  range  from  20  to  70  milllra- 
dlans.  The  errors  appear  to  be  a  function  of 
target  azimuth  with  the  larger  errors  for  targets 


further  from  the  nose  of  the  aircraft.  The  pilots 
generally  agree  that  HMS  reverse  cueing  error  Is  of 
sufficient  magnitude  that  it  is  unusable  outside 
approximately  1NM.  As  presently  aechanized,  the 
STS  requires  cueing  accuracies  within  8  alls  (2 
miles  narrow  field  of  view)  for  successful  handoff. 

The  presently  known  sources  of  HMS  error  are 
Inaccuracies  In  cockpit  magnetic  field  mapping  and 
aircraft/systeaa  boreslght.  The  cockpit  mapping 
was  accomplished  to  obtain  correction  factors  for 
cockpit  magnetic  field  effects  on  the  transmitter. 
The  accuracy  of  the  cockpit  mapping  Is  questionable 
because  the  mapping  fixture  did  not  fit  the  cockpit 
properly  and  100  percent  coverage  of  the  cockpit 
magnetic  field  was  not  possible.  The  cockpit  will 
be  re-mapped  with  a  modified  fixture.  In  addition, 
the  aircraft /systems  boreslght  will  be  accoapllshed 
with  a  new  boreslght  procedure.  The  original 
procedure  boreslghted  all  systems  (INU,  HUD,  FOR, 
STS)  with  respect  to  the  aircraft.  The  new  proce¬ 
dure  adds  the  requirement  to  boreslght  systems  with 
respect  to  each  other  in  order  to  reduce  error. 

Human  Factors 

Human  factors  evaluations  of  the  AMAS  and 
associated  technologies  has  been  limited  due  to 
developmental  problems;  however,  some  cosnents  and 
observations  are  In  order  concerning  APPT  develop¬ 
aent  and  the  color  moving  map. 

Controls 

During  early  AMAS  weapon  deliveries  inadver¬ 
tent  sldestlck  Inputs  were  detected.  This  problem 
was  caused  by  a  combination  of  two  factors:  1)  the 
G-force  acting  on  the  pilot's  right  hand  and  2)  the 
C-forces  acting  on  the  mass  of  the  sldestlck.  With 
the  pilot's  hand  on  the  weapon  release  button,  up 
to  six  pounds  of  sldestlck  force  were  recorded. 

The  lnteraediate  solution  to  this  problem  was  to 
have  the  pilot  release  the  weapon  wlch  the  alter¬ 
nate  release  button  and  retain  "hands-on"  the 
sldestlck  during  APPT  deliveries.  The  sldestlck 
hysteresis  band  was  eventually  expanded  to  prevent 
G-forces  from  commanding  undeslred  stick  force 
Inputs  during  AMAS  deliveries. 

Display 

One  of  the  cockpit  displays  used  during  an 
AMAS  air-to-ground  delivery  mode  Is  the  vertical 
planning  scale  (TPS).  The  VPS  Is  displayed  In  the 
HUD  and  provides  the  pilot  his  predicted  APPT 
delivery  profile  (climbing,  descending,  or  level  5 
"g"  release),  anticipated  release  altitude,  and 
climb  or  dive  angle.  Pilots  agree  with  the  VPS 
concept  but  do  not  like  Its  mechanization.  Some  of 
the  problems  noted  are:  the  VPS  does  not  appear 
until  late  in  the  ingress  steering  which  leaves 
little  time  to  adjust  the  delivery  profile  through 
pilot  blending  or  release  range  changes;  the  VPS 
does  not  smoothly  transition  from  lofting  to  diving 
deliveries  during  pilot  blending  or  release  range 
changes;  the  digital  data  Is  not  always  found  In 
the  same  lo  a 'Ion;  and  the  display  is  not 
Intuitive . 


Helmet  Mounted  Sight  (HMS) 


disorientation  to  the  pilots-  Ride  qualities  using 
flat  turn  have  been  objections!  by  the  pilots. 


the  HMS  was  Incorporated  on  the  AFTI/r-16  to 
provide  the  capability  to  designate  off  boresight 
ground  targets  of  opportunity  for  the  STS.  It  was 
also  designed  to  Improve  the  speed  and  ease  of 
acquiring  airborne  targets  by  cueing  the  radar  and 
STS.  The  use  of  the  HMS  Is  extremely  simple.  It 
la  normally  preselected  as  the  acquisition  sensor 
by  the  sensor  manager.  If  not,  It  can  be  selected 
with  one  movement  of  the  hands-on  display  manage¬ 
ment  switch.  Once  the  HMS  Is  selected,  the  pilot 
simply  places  the  HMS  reticle  over  the  target  and 
designates/releases.  The  radar  will  then  acquire 
and  track  the  target. 

Another  useful  feature  of  the  HMS  Is  reverse 
cueing.  Once  a  target  Is  tracked,  the  HMS  can  be 
uaed  to  locate  the  target  by  following  the  reticle 
discretes.  A  light  discrete  commands  head  movement 
in  the  vertical  and/or  horizontal  plane.  Once  the 
target  la  within  a  small  angle  error,  all  discretes 
are  extinguished. 

Boresighting  the  HMS  Is  as  simple  as  its  use. 
HMS  bit  Is  selected  on  the  MFD  BIT  page.  The 
reticle  appears  and  Is  placed  over  the  boresight 
cross  on  the  HUD  test  pattern.  The  pilot  desig¬ 
nates  and  the  boresight  Is  complete. 

The  HMS  Is  simple  and  natural  to  use,  but  Its 
effectiveness  has  been  poor.  Because  Che  STS  FOV 
Is  very  narrow,  the  boresight  of  both  the  HMS  and 
STS  must  be  very  accurate  to  achieve  satisfactory 
result**  The  radar  with  Its  larger  FOV  consist¬ 
ently  achieves  target  acquisition  after  being  cued 
by  the  HMS.  The  STS  does  not.  Another  problem  Is 
pilot  head  position.  If  the  pilot's  head  varies 
much  from  the  boresight  head  position,  an  error  Is 
Introduced  In  the  cueing.  Opening  and  closing  the 
helmet  visor  or  moving  the  visor  slightly  also 
Introduces  cueing  errors  and  requires  a  re-bore- 
sight  . 

The  HMS  adds  a  much  needed  off  boresight 
capability  and  Is  simple  for  the  pilot  to  use; 
however,  at  the  present  stage  of  testing,  the  HMS 
and  STS  boresight  have  not  been  accurate  enough  to 
produce  acceptable  results. 

Ride  Qualities 

Overall,  the  pilots  have  accepted  automated 
guidance  Inputs  for  the  APPT  guidance  system 
(Ingress,  curvilinear  delivery,  and  egress  maneu- 
verlng).  The  automated  aircraft  responses  are 
similar  to  a  pilot's  manual  inputs  and  are  Intui¬ 
tive  to  the  pilot.  Because  of  this,  the  AMAS 
alr-to-  ground  ride  quality  Is  acceptable  by  all 
pilots  with  the  exception  '  flat  turn  (direct  side 
force)  maneuvering.  Flat  turn  Is  addressed  In  more 
detail  In  following  paragraphs - 

Flat  Turn:  The  APPT  guidance  and  control 
system  Incorporates  flat  turn  (a  direct  side  force) 
In  nulling  small  heading  errors  to  the  weapon 
release  point.  It  was  however,  Incorporated 
without  regard  to  Its  effects  of  spatial 


When  a  pi-ot  la  flying  in  wlngs-level  flight 
with  no  lateral  acceleration,  the  only  acceleration 
sensed  by  him  Is  gravity.  With  the  addition  of 
direct  side  force,  however,  lateral  acceleration 
causes  the  acceleration  vector  to  tilt.  In  day¬ 
light  and  In  good  visibility,  the  pilot  can  see  the 
horizon  and  then  knows  that  he  la  In  wlngs-level 
flight  with  lateral  acceleration  present.  In  poor 
visibility  or  at  night,  however,  the  pilot  per¬ 
ceives  the  acceleration  vector  to  be  pointing 
toward  the  center  of  the  earth,  and  he  therefore 
mialnterprets  his  roll  attitude  to  be  banked.  This 
spatial  disorientation  will  be  uncomfortable  at 
beat  but  under  such  conditions  as  low  altitude  and 
high  speed  will  be  Intolerable  and  will  result  In 
aborted  weapons  delivery  runs. 

In  fact,  even  control  laws  using  only  bank 
angle,  when  applied  by  an  autopilot,  can  Induce 
roll  disorientation  through  use  of  Improper  roll 
accelerations.  It  Is  hoped,  however,  that  tbs 
optimization  or  elimination  of  direct  side  force 
will  provide  a  set  control  laws  that  are  suitable 
for  autopilot  uae  at  night  or  In  low  visibility. 

Workload 

Quantltlzed  data  has  not  been  obtained  to 
determine  reductions  In  pilot  workload  due  to  AMAS. 
However,  It  Is  apparent  from  pilot  comments  that 
the  automated  air-to-ground  system  Is  Intuitive  and 
provides  predictive  displays  that  reduce  pilot 
anxiety.  These  factors  coupled  with  the  fact  the 
pilot  la  literally  along  for  the  ride  once  APPT  Is 
activated  have  provided  the  pilot  the  opportunity 
to  monitor  ocher  aspects  of  his  cockpit  or  outside 
world  while  performing  a  5  "g"  low  level  curvi¬ 
linear  delivery.  His  overall  workload  may  not  be 
reduced,  just  redistributed  to  other  tasks.  This 
In  Itself  Is  a  major  benefit  with  potential  pay¬ 
offs. 

Color  Map  Display 

The  color  map  display  evaluated  was  a  film  map 
displayed  via  video  processing  on  the  center  5  in  x 
5  In  MFD.  Pilots  noted  that  the  map  was  useful  and 
aided  in  cultural  feature  Identification.  No 
extensive  evaluations  of  this  map  were  conducted  to 
determine  Its  optimum  utility.  It  was  noted  that 
the  color  display  was  washed  out  under  direct 
sunlight.  Also,  the  5  in  x  5  in  size  of  the  center 
MFD  may  not  be  optimum  (large  enough)  to  allow  the 
pilot  to  quickly  grasp  displayed  Information.  A 
new  digital  dacabase  map  display  system  will  be 
evaluated  in  the  near  future. 

SUMMARY 

It  Is  premature  to  provide  overall  assessments 
at  this  time  as  AMAS  air-to-ground  and  air-to-air 
have  yet  to  be  fully  developed  or  demonstrated; 
however.  It  Is  worth  noting  that  AMAS  air-to-ground 
development  test  results  are  promising.  Indicating 
there  may  be  payoffs  In  low  level  curvilinear 
weapons  delivery.  This  opens  a  new  area  of 


capability  while  achieving  weapon  accuracy  and 
reducing  pilot  workload. 

Preliminary  reeulte  alao  Indicate  that 
epeclflc  AFTI/F-16  DPCS  designs  nay  have  signifi¬ 
cant  potential  for  future  applications.  The  first 
Is  the  system  wide  Integrity  management  and  ground 
collision  avoidance  system  which  has  demonstrsted 
enhanced  flight  safety  for  low  level  flight  of 
automated  systems.  The  second  Is  the  control  law 
design  flexibility  permitted  by  the  digital  flight 
control  system  that  allows  effective  utilisation  of 
available  aircraft  structural  capability  (l.e. 
AFTI/F-16  elevated  load  factor  roll  race  limiter). 

The  AFTI/F-16  developmental  activity  through¬ 
out  the  remainder  of  the  test  program  will  focus 
emphasis  In  the  following  areas:  air-to-ground 
waapon  performance  and  tactical  demonstration. 
Integrated  voice  systems,  digital  terrain  map, 
standard  avionics  Integrated  fusing  tactical 
munitions  dispenser,  and  elr-to-alr  AMAS.  Results 
from  their  developmental  tests  will  be  presented  in 
subsequent  updates  to  this  technical  paper. 
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ABSTRACT 

The  Advanced  Fighter  Technology  Integration 
(AFTI)/F-16  teat  program  haa  been  conducting 
developmental  teat  flight*  on  new  technologic* 
dealgned  to  enhance  the  weapon*  ayatem  effectlve- 
ne*a  and  aurvivablllty  of  fighter  aircraft.  Thl* 
paper  will  focua  on  the  workload  aapect*  of  the 
pilot  vehicle  Interface  in  regard  to  the  new 
technologlea  teated  during  the  automated  maneu¬ 
vering  attack  ayatem  (AMAS)  Phaae  II.  Subjecta 
dlacuaaed  in  thla  paper  Include:  a  wide  flsld- 
of-vlew  head  up  display;  automated  maneuvering 
attack  ayatem/aenaor  tracker  ayatem;  maater  mode* 
that  configure  flight  control*  and  mlaalon 
avionic* ;  a  modified  helmet  mounted  aight;  Improved 
multifunction  dlaplay  capability;  a  voice  inter¬ 
active  command  ayatem;  ride  qualities  during 
automated  weapon  delivery;  a  color  moving  map;  an 
advanced  digital  map  dlaplay;  and  a  g-lnduced 
lo»»-of-con*ciou»ne*«  and  spatial  disorientation 
auto-recovery  ayatem.  The  authors  will  discuss 
preliminary  findings  to  date  and  provide  insight  aa 
to  potential  payoffs  of  the  emerging  technologies. 


ABBREVIATIONS 
ADIR  -  AMAS  Director 

AFTI  -  Advanced  Fighter  Technology  Integration 

AGL  -  Above  Ground  Level 

ALC  -  Automatic  Level  Control 

AMAS  -  Automated  Maneuvering  Attack  System 

APPT  -  AMAS  Pre-Planned  Target 

ASE  -  Aeroservoelastlclty 

DFCS  -  Digital  Flight  Control  System 

DSC  -  Digital  Scan  Converter 

FCC  -  Fire  Control  Computer 

FCR  -  Fire  Control  Radar 

PLIR  -  Forward  Looking  Infrared 

FOV  -  Field  of  View 

GCA  -  Ground  Collision  Avoidance 

HMS  -  Helmet  Mounted  Sight 

HUD  -  Head  Up  Display 

IFFC  -  Integrated  Fire  Flight  Control 

INU  -  Inertial  Navigation  Unit 

KCAS  -  Knots  Calibrated  Airspeed 

LARA?  -  Low  Altitude  Radar  Autopilot 

LRU  -  Line  Replaceable  Unit 

MDA  -  Minimum  Descent  Altitude 

MFD  -  Multifunction  Display 

MSIP  -  Multinational  Stage  Improvement  Program 

NVL  -  Non-Wing*  Level 

PDRR  -  Pre-Determined  Release  Range 

RALT  -  Radar  Altimeter 


STS  -  Sensor  Tracker  System 

SWIM  -  System  Wide  Integrity  Management 

VPS  -  Vertical  Planning  Scale 

YAG  -  Yttrium  Aluminum  Garnet 

INTRODUCTION 

In  the  early  day*  of  aerial  warfare,  the  best 
stick  and  rudder  man  won  the  battle.  Today,  the 
pilot  with  the  best  available  technology  and  the 
most  manageable  cockpit  will  have  e  clear  advan¬ 
tage.  To  maintain  this  clear  advantage,  pilot 
workload  consideration*  can  no  longer  ha  ignored  as 
in  aarly  days  of  flight  when  pilot  vehicle  inter¬ 
faces  (PVI)  were  addressed  aa  an  afterthought. 

This  was  primarily  due  to  simple  cockpit  configura¬ 
tions  (a  few  switches  and  even  fewer  displays).  In 

today's  environment  of  euperaonlc  closure  rates, 
multiple  weapons,  multiple  sensors,  and  counter 
measures,  the  key  to  success  la  rapid  assessment  of 
available  information  and  equally  quick  employment 
of  the  right  weapon.  The  pilot  who  does  not  have 
the  senaor  information  readily  available  in  an 
easily  Interpreted  format  or  who  stumbles  during 
awltch  actions  to  employ  weapons  will  loss  in 
training  and  die  in  combat.  The  ability  to  design 
a  pilot-friendly  cockpit  haa  become  aa  important  if 
not  more  so  than  the  new  weapon  and  system  tech¬ 
nologlea  themselves.  To  illustrate  the  problem  of 
pilot  workload,  a  comparison  of  the  relative 
complexity  of  aircraft  from  World  War  I  to  the 
present  is  presented  In  Table  1  by  listing  the 
number  of  sensors,  weapons,  and  avionics  available. 
The  sheer  numbers  of  today's  cockpit  systems  are 
challenging,  not  to  mention  their  Increased  com¬ 
plexity.  Each  of  the  listed  systems  have  cockpit 
switches  and  displays  for  the  pilot  to  operate  and 
manage.  In  addition,  as  the  capability  of  each 
system  is  Improved,  the  number  of  switches  and 
complexity  also  Increase. 

One  of  the  primary  objectives  of  the  AFTI/F-16 
development  program  Is  to  assess  the  PVI  of  new 
technologies  and  to  provide  assessments  as  to 
Interfaces,  workload,  and  utility.  Technologies 
discussed  with  these  objectives  In  mind  include: 
wide  f leld-of-view  head  up  display;  automated 
maneuvering  attack  system/sensor  tracker  system; 
master  modes;  helmet  mounted  sight  (HMS);  multi¬ 
function  displays  (MFD);  voice  interactive  comaund 
system;  ride  qualltlea  during  automated  weapon 
delivery;  color  moving  map/dlgltal  map  generator; 
and  a  g-lnduced  loss-of-consclousness  (GLOC)  and 
spatial  dlsorlentaton  auto-recovery  system. 


Test  Aircraft  Configuration  Summary 

The  AFTI/F-16  (Figure  1)  la  a  highly  modified 
F-16  aircraft.  The  modifications  include  an 
asynchronous  operation  triplex  digital  flight 
control  system,  which  provides  multiple  in-flight- 
selectable  task  tailored  flight  control  laws, 
including  six-degree-of-f reedom  decoupled  aircraft 
motions.  Twin  canards  are  mounted  from  actuators 
in  each  side  of  the  lower  portion  of  the  engine 
inlet.  A  fuselage  dorsal  fairing  was  added  to 
provide  more  room  for  avionics  and  instrumentation 
hardware.  A  10. 5  inch  diameter  forward-looking 
infrared  (FLIR) /YAG  laser  STS  is  mounted  conform¬ 
ally  in  the  right  wing  root  with  an  aerodynamlcally 
slmlllar  "dummy  pod"  mounted  in  the  left  wing  root. 
A  nearly  "all  attitude"  radar  altimeter  is  instal¬ 
led  utilizing  a  four  antenna  pattern  around  the 
forward  fuselage.  A  helmet  mounted  sight  (HMS) 
system  is  installed  in  the  cockpit.  New  and 
modified  cockpit  controls  and  displays  include  a 
redesigned  sldestlck  controller  Incorporating  eight 
switches,  a  linear  motion  throttle  with  a  twist 


Figure  1  AFTI/F-16  Aircraft  Configuration 


action  controller  for  vertical  decoupled  motion  and 
controlling  AMAS  functions,  a  conventional  optics 
wide  f ield-of-view  hesd  up  display,  and  three 
araltifunctlon  display  cathode  ray  tubes  for  system 
control  end  display.  See  Figure  2  for  cockpit 
layout . 
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The  core  svlonlc  hardware  and  software  for 
AMAS  Is  the  F-16  Multi-Stage  Improvement  Program 
(MSIP)  system.  The  hardware  Is  essentially  unmodi¬ 
fied  and  the  software  Is  highly  modified  to  accom¬ 
plish  AMAS  functions.  The  integration  of  sensors, 
fire  control,  flight  control,  stores  management, 
and  cockpit  displays  were  accomplished  via  the 
avionics  bus  structure  depicted  In  Figure  3. 


Figure  2  AMAS  Cockpit 


tami«  nacti  *««m# 


Figure  3  AMAS  Avionics  Multiplex  Bus  Configuration 
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outside  world  along  tha  flight  path  of  tha  air¬ 
craft,  thereby  supplementing  tha  pllot'a  forward 
f  iald-of-vlaw. 

Tha  HUD  s-  conaiata  of  tha  following  llna- 
replaceabla  unlta  (LRU): 

1.  Pllot'a  Display  Unit  (PDU) 

2.  Elactronlca  Unit  (EU) 

3.  lata  Sanaor  Unit  (ISU) 

(Tha  HUD  PDU  aount  and  tha  RSU  rack  ara  daalgnatad 
to  ba  raplacad  without  any  ra-boraalghtlng 
requl raaanta). 

ASSESSMENT 


VIDE  FI  ELD-0  F- VIEW  HEAD  UP  DISPLAY 
DESOUFTIOH 

Tha  APTI/F-16  haad  up  dlaplay  (HUD)  (Flgura  4) 
la  a  conventional  optica  daalgn  which  provides  an 
lncraaaad  flald  of  vlaw  (FOY)  ovar  tha  baalc  F-16A 
HUD.  Tha  two  HUD*  can  ba  compared  In  Table  2. 


cwviumu 


Flgura  »  wide  PlaU  of  Vlau  *mmi  Up  Display 

Table  2  APTI/F-16  and  F-16A  HUD 
Flelde  of  View 

AFTI/F-16  F-16A 

Inatantaneoua  15°  x  20°  9°  x  13° 

Total  25°  20° 

The  HUD  act  la  a  combined  electronic/optical 
device  that  provide*  a  vlaual  dlaplay  of  flight 
Information  In  the  fora  of  atroka-wrlttan  ayabola. 
The  ayabola  rapraaent  Information  relating  to  the 
attack,  navigation,  weapon,  aiming,  and  landing 
mode*.  It  alao  provide*  symbol*  for  essential  air¬ 
craft  performance  data  Including  altitude,  air¬ 
speed,  attitude,  and  heading.  The  symbol*  are 
generated  In  response  to  command  and  data  Input 
signals  supplied  by  the  fire  control  computer  and 
varloua  other  system*  and  sensors  of  the  aircraft 
avionic  network. 

All  information  Is  displayed  via  a  combining 
glasa  assembly  mounted  In  the  forward  f ield-of-vlew 
at  eye  level,  thus  eliminating  the  pilot's  need  for 
multi-indicator  scanning  during  high  pilot  workload 
phases  of  the  mission.  The  stroke  symbology  Is 
focused  at  Infinity  and  superimposed  upon  the 


The  AFTI  HUD  has  a  5  degree  larger  total  FOV 
which  reduce*  the  aoda  straw  effect  and  minimises 
aircraft  maneuvering  to  locate  targets,  steer- 
points,  etc.  It  also  provides  more  real  estate  for 
less  cluttered  symbology  and  better  target  status 
and  trend  information.  The  most  significant 
contribution,  however.  Is  the  Increase  In  Instan¬ 
taneous  FOV  from  a  9  x  13  degree  display  to  a  15  x 
20  degree  display.  This  Improvement  allows  rapid 
dissemination  of  available  Information  without 
timely  and  sometimes  awkward  head  movements. 

Pilots  are  unanimous  In  their  praise  of  the  wide 
FOV  feature  of  the  AFTI  HUD. 

The  AFTI  HUD  Is  also  equipped  with  digital 
readouts  for  airspeed,  altitude,  and  heading,  and 
new  Increment  markings  for  the  analog  displayed 
airspeed  and  altitude.  The  digital  readouts  are  a 
significant  Improvement  for  Inatantaneoua  Interpre¬ 
tation  of  airspeed,  altitude,  and  heading.  The 
analog  scale  was  retained  for  trend  Information 
during  rapid  changes  In  parameters  and  is  valuable 
for  thla  purpose .  The  change  In  scaling  factors, 
however,  has  not  been  *o  well  received.  Airspeed 
was  changed  from  10  KTS  to  *5  KTS  increments  and 
altitude  was  changed  from  100  feet  to  250  feet 
Increments.  Whether  It  Is  a  result  of  training  or 
other  factors,  pilots  have  difficulty  In  rapidly 
Interpreting  the  new  scale  Increments.  The  digital 
boxes  also  occlude  the  scale  markings  which  cause* 
confusion  when  trying  to  Interpret  the  scale  with  a 
quick  glance. 

The  greater  FOV  of  the  AFTI  HUD  Is  a  signifi¬ 
cant  Improvement  over  the  F-16A  HUD  and  earned  high 
marks  from  all  AFTI  pilots.  The  AFTI  pilots  also 
liked  the  digital  displays  for  accurate.  Instan¬ 
taneous  readouts,  and  the  analog  scale  for  trend 
Information.  The  new  analog  scale  increments  for 
altitude  and  airspeed  were  unsatisfactory  as  were 
the  digital  readout  positions. 

The  WF0V  HUD  has  been  Incorporated  In  the 
production  F-16.  The  digital  displays  of  airspeed, 
altitude,  and  heading,  and  the  new  analog  scale 
increments  were  not  used. 
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AUTOMATED  MANEUVERING  ATTACK 
SYSTEM/SEHSOX  TXACKZX  SYSTEM 


high  humidity  and  by  aerosols,  eapeclally  large- 
parti  clc  maritime  fogs. 


DESCRIPTION 

The  ANAS  will  only  be  dlacuased  aa  it  pertains 
to  air-to-ground  weapons  deliveries  since  this  is 
the  only  testing  accomplished  as  of  this  writing. 
The  AKAS  air-to-ground  function  is  called  the 
AMAS  pre-planned  target  mode  (APPT) .  The 
delivery  mode  la  designed  to  Increase  survivability 
by  using  a  low  altitude  5  g  turning  delivery  with 
laser  ranging  to  enhance  weapon  system  accuracy. 

The  weapon  deliveries  are  conducted  on  pre-planned 
targets  using  IMS  target  coordinates  for  steering 
and  sensor  cueing.  The  bombing  geometry  can  he 
updated  using  the  radar,  HUD,  or  STS.  Targets  of 
opportunity  can  also  be  attacked  by  using  the  HMS 
to  cue  the  radar  and  STS. 

The  automatic  delivery  consists  of  ingress 
steering  to  an  appropriate  offset,  5  g  curvilinear 
delivery,  and  egress  steering.  The  delivery  is 
depicted  in  Figure  S. 


Figure  5  Automated  Maneuvering  Attack  System 
Air- to-G  round  Profile 


The  STS  is  an  integrated  forward-looking 
Infrared  sensor,  laser  ranger  processor,  and  closed 
loop  tracking  system  which  has  been  designed  to 
complement  the  fire  control  functions  of  the 
AFTI/F-16  avionics.  The  STS  consists  of  three 
LRUs :  the  STS  head  conformally  mounted  in  the 
right  st rake,  the  STS  processor  Installed  in  the 
dorsal  bay,  and  the  auxiliary  power  supply  instal¬ 
led  la  the  right  aide  inlet  bay.  A  dummy  senaor 
heed  is  mounted  on  the  left  strake  to  aerodynam- 
lcally  simulate  the  STS  subsystem. 

The  FLIK  sensor  utilises  Infrared  radiation 
emitted  naturally  by  all  objects  to  produce  a  TV 
display-compatible  image  of  the  temperature 
differences  in  the  scene.  The  FLXK  sensitivity 
is  designed  such  that  usable  imagery  is  available 
day  or  eight  and  In  moot  weather  conditions. 

System  performance  is  degraded  most  severely  by 


The  FLIR  has  three  flelds-of-view  (FOV)  which 
are  selectable  automatically,  in  some  instances,  or 
manually  by  the  pilot.  The  FOVs  are  llated  in 
Table  3. 

Table  3  Fields  of  View 

FOV  Width  9  10K  ft 

Wide  3.8  x  3.8  deg  666  feet 

Medium  1.7  x  1.7  deg  296  feet 

Small  0.8S  x  0.8S  deg  148  feet 


The  laser  ranger  determlnea  range  by  trans¬ 
mitting  extremely  focused  pulses  of  near  Infrared 
radiation  to  a  one-half  mllllradlan  spot  on  the 
ground  and  then  measures  the  time  to  receive  the 
reflected  energy. 

The  field  of  regard  of  the  STS  Includes  all 
points  in  the  forward  hemisphere  and  a  look-back 
angle  of  30  degrees.  In  other  words,  all  points 
from  boresight  direction  to  120  degrees  from 
boreelght  are  usable ■  The  exception  la  the  air¬ 
craft  fuselage  which  masks  part  of  the  left  field 
of  regard  for  the  right  strake  installation.  This 
limitation  would  be  overcome  in  a  production  con¬ 
figuration  by  installing  another  FLIk  on  the  left 
Inboard  strake. 

ASSESSMEXT 

The  automated  delivery  is  simple  using  IMS 
steering.  It  requires  only  two  hands-on  switch 
actions  in  the  target  area:  integrated  fire  and 
flight  control  system  (IFFC)  engaged  and  weapon 
consent  button  depressed.  Other  required  switch 
actions  such  as  radar  altimeter  on,  APPT  node 
select,  release  range,  and  the  correct  target 
steerpolnt  can  all  be  preselected.  Once  IFFC  is 
engaged,  the  pilot  is  free  to  do  other  tasks  such 
as  look  for  bandits,  monitor  other  systems,  snd 
control  airspeed  with  the  throttle. 

Unfortunately,  the  INS  is  not  accurate  enough 
to  achieve  desired  weapons  accuracy.  The  preferred 
method  is  through  FLIK  tracking  and  laser  ranging. 
In  addition  to  being  more  accurate,  this  method 
also  provides  a  night  target  detection  and  weapons 
delivery  capability.  However,  as  of  this  writing, 
acceptable  performance  has  not  been  achieved.  The 
FLIK  target  detection  range  is  adequate  but  its 
target  track  range  and  target  track  reliability  are 
not  consistent.  The  target  tracking  gate  is  also 
fixed  in  sise  which  contributes  to  the  tracking 
problem.  As  the  target  grows  larger  than  the 
tracking  gate,  the  STS  will  sometimes  break  lock. 
The  pilot  can  compensate  for  this  by  manually 
changing  STS  FOVs  from  narrow  to  medium  to  wide  as 
the  target  grows  in  sise.  These  problems  force  the 
pilot  to  continually  monitor  the  STS  track  status 
and  thus  preclude  a  major  benefit  of  the  AMAS 
system.  In  addition,  off  boresight  FLIK  slewing  is 
difficult  due  to  undetermined  reasons.  The  problem 
manifests  Itself  as  a  target  drift  in  the  FLIR 
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video  end  an  lnconalatanc  (lav  rata  depandent  on 
tho  direction  the  curaora  are  slewed.  All  theae 
problems  together  have  lncreaaed  the  pilot  workload 
to  an  intolerable  level*  However,  theae  dlfficul- 
tlea  have  been  overcome  on  similar  systems,  and  ve 
anticipate  It  la  only  a  natter  of  tine  before  the 
aaae  la  true  for  AFTI. 


One  of  the  cockpit  dlaplaya  uaed  during  an 
AMAS  air-to-ground  delivery  node  la  the  vertical 
planning  acale  (VPS)  shown  In  Figure  6*  The  VPS  la 
diaplayed  In  the  HUD  and  provldea  the  pilot  hi  a 
predicted  APPT  delivery  profile  (clinblng,  descend¬ 
ing,  or  level  5  g  release),  anticipated  release 
altitude,  and  cllnb  or  dive  angle*  Pilots  agree 
with  the  VPS  concept  but  do  not  like  lte  machaniz- 
atlon.  Sona  of  the  probleas  noted  are:  the  VPS 
does  not  appear  until  late  In  the  Ingress  steering 
which  leaves  little  tine  to  adjust  the  delivery 
profile  through  pilot  blending  or  release  range 
changes;  the  VPS  does  not  snoothly  transition  fron 
lofting  to  diving  deliveries  during  pilot  blending 
or  release  range  changes;  the  digital  data  Is  not 
always  found  In  the  sane  location;  and  the  display 
la  not  Intuitive* 
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figure  6  Vnrtlcln  Planning  Seal* 


The  APT1  pilots  found  the  AMAS  syatea  staple 
to  use  and  tactically  sound  In  Its  aechanlzstlon. 
Assuming  the  problems  with  the  STS  are  overcoae, 
the  AMAS  air-to-ground  weapons  delivery  node  holds 
great  proalse  for  Increasing  survivability,  reduc¬ 
ing  workload.  Increasing  accuracy,  and  providing  an 
additional  night  capability. 


MASTER  MODES 


DESCRIPTION 


The  "master  mode"  concept  was  designed  to 
allow  single  switch  selection  of  "task  tailored" 
flight  control  nodes  and  "pre-prograned"  avionics 


set-up.  The  following  eight  master  modes  are 
available  In  the  AFTI/F-16:  dogfight,  missile 
override,  navigation,  air-to-air  missiles,  alr-to- 
alr  and  air-to-ground  gun,  air-to-ground,  selective 
jettison,  and  emergency  jettison.  Three  master 
modes  are  selected  by  a  hands-on  throttle  switch, 
four  on  the  HUD  control  panel,  one  on  the  landing 
gear  panel,  and  one  on  the  MFD.  The  master  mode 
switches  on  the  throttle  and  HUD  are  depicted  In 
Figure  7. 
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Task  tailoring  the  flight  control  system  Is 
achieved  through  modification  of  the  digital  flight 
control  laws  to  optimize  aircraft  performance  for 
selected  missions.  Included  In  the  eight  master 
modes  are  four  distinct  flight  control  modes; 
normal,  air-to-surface  bombing,  alr-to-surface  gun, 
and  air-to-air  gun.  These  modes  are  optimized  for 
the  tasks  described  by  their  title.  As  an  example, 
the  alr-to-surface  gun  mode  is  a  g  command  design 
used  to  optimize  strafing,  while  the  air-to-air  gun 
mode  Is  a  combination  g  and  pitch  rate  command 
design  used  to  optimize  air-to-air  tracking.  For 
flight  test  purposes  an  alternate  flight  control 
mode  wae  provided  for  each  of  the  four  primary 
modes.  In  addition,  there  are  slight  modifications 
to  the  flight  controls  for  the  gear  down  configura¬ 
tion  and  for  air-to-air  refueling. 


The  other  function  of  the  master  modes  Is  to 
use  a  single  switch  action  to  configure  the  avion¬ 
ics  for  a  specific  task.  Each  of  the  master  modes 
can  be  "pre-progransed"  such  that  the  next  selec¬ 
tion  of  a  mode  automatically  reconfigures  the 


cockpit  to  tho  pilot’*  l««t  ••lection*  for  th*t 
mode.  Tho  progr*mn*bl«  parameter*  Include  weapon 
typo,  profile  for  air-to-ground  (release  pulao*, 
fusing,  interval,  etc.),  delivery  aode,  elghtlng 
option  for  air-to-air,  MFD  format*,  and  radar  node. 
Furthermore ,  each  of  the  submode*  can  be  pre¬ 
programmed  for  even  greater  flexibility. 

ASSESSMENT 

The  master  mode  function  significantly  reduces 
pilot  workload  while  optlnixlng  aircraft  perform¬ 
ance.  AFTI  pilots  found  this  concept  to  be  both 
simple  to  use  and  affective  for  improving  weapon 

system  effectiveness. 

The  master  mode*  are  easily  accessed  through 
hands-on  switches  or  up-front  controls.  The  up¬ 
front  controls  are  located  on  the  HUD  control  panel 
and  require  little  hand  and  eye  movement  to  acti¬ 
vate.  In  addition,  the  single  switch  action  to 
select  both  avionics  and  flight  control  mode*  ie 
out* tending. 

The  capability  to  pre-program  the  avionics  and 
weapons  for  selected  missions  saves  the  pilot  much 
valuable  time  in  the  air.  It  also  allows  the  pilot 
to  rapidly  transition  from  one  type  mission  to 
another.  One  example  is  the  transition  from  an 
air-to-ground  weapons  delivery  profile  to  an 
air-to-air  weapons  employment  when  unexpectedly 
confronted  by  an  airborne  adversary.  The  only 
switch  action  required  is  to  either  depress  the  AAM 
master  mode  button  on  the  HUD  control  panel  or  move 
the  hands-on  master  mode  switch  to  dogfight  or 
aisalle  override. 

Two  major  benefits  are  derived  from  task 
tailoring  the  flight  controls.  First  and  most 
importantly,  aircraft  performance  is  optimised  for 
selected  mi  a si on  scenarios.  Secondly,  aircraft 
handling  qualities  are  also  optimised.  Both  these 
factors  combine  to  reduce  pilot  workload  and 
improve  performance. 

The  use  of  master  modes  for  the  'pre-program¬ 
med'  avionic*  set  up  has  been  incorporated  in  the 
production  F-16.  Task  tailoring  the  flight  control 
laws  is  planned  once  the  production  F-16  has  s 
digital  flight  control  computer. 


HELMET  MOUNTED  SICHT 
DSSCKIFTIO* 

The  HMS  was  Incorporated  on  the  AFTI/F-16  to 
provide  the  capability  to  designate  off  boraslght 
ground  targets  of  opportunity  for  the  STS.  It  was 
also  designed  to  improve  the  speed  and  ease  of 
acquiring  airborne  targets  by  cueing  the  radar  and 
STS. 

The  MS  consists  of  a  mini  computer ,  e  trans¬ 
mitter  located  on  the  canopy  which  develops  a 
magnetic  field,  a  receiver  on  the  helmet  which 
senses  the  magnetic  field,  a  control  panel,  and  an 
LED  array  under  the  helmet  visor  housing  which 


projects  the  reticle  end  discrete  display  (Figure 
8)  on  the  helmet  visor. 


O 


Figure  8  HMS  Sight  Reticle  and  Discretes 

It  is  normally  preselected  as  the  acquisition 
sensor  by  the  sensor  manager.  If  not,  it  can  be 
selected  with  one  movement  of  the  hands-on  display 
management  switch.  Once  the  HMS  Is  selected,  the 
pilot  places  the  HMS  reticle  over  the  target  and 
designates/releases.  The  STS/radar  will  then 
acquire  and  track  the  target. 

Another  feature  of  the  BtS  is  reverse  cueing. 
Once  s  target  is  tracked,  the  HMS  can  be  used  to 
locate  the  target  by  following  the  reticle  dis¬ 
cretes.  A  light  discrete  comaands  head  movement  in 
the  vertical  and/or  horlsontal  plan*.  Once  the 
target  is  within  a  small  angle  error,  all  discretes 
are  extinguished. 

Boresighting  the  HMS  is  achieved  by  selecting 
HMS  bit  on  the  MFD  BIT  page.  The  reticle  appears 
and  Is  placed  over  the  boraslght  cross  on  the  HUD 
test  pattern.  The  pilot  designates  and  the  bore- 
sight  is  complete. 

ASSESSMENT 

The  HMS  Is  simple  and  natural  to  use,  but  its 
effectiveness  cueing  the  STS  has  been  limited. 
Because  the  STS  FOV  is  very  narrow,  the  borealght 
of  both  ths  HMS  and  STS  must  be  very  accurate  to 
achieve  satisfactory  results.  The  radar  with  Its 
larger  FOV  consistently  achieves  target  acquisition 
after  being  cued  by  the  HMS.  The  STS  does  not. 

Another  problem  is  pilot  head  position.  If 
the  pilot's  head  varies  much  from  the  boraslght 
head  position,  an  error  Is  Introduced  In  the 
cueing.  Opening  and  closing  the  helmet  visor  or 


adjusting  tha  visor  slightly  slso  Introduces  cueing 
errors  end  requires  s  re-borsslght. 

The  reverse  cueing  feature  of  the  HMS  Is  very 
useful  end  essy  to  use.  This  festure  narrows  the 
pilot's  visual  search  pattern  to  a  very  saall  piece 
of  the  sky  and  reduces  the  tine  required  for  visual 
acquisition.  This  significantly  reduces  his  work¬ 
load  and  greatly  Improves  his  chances  for  survival 
In  a  hostile  environment. 

The  boreslght  procedures  are  also  vary  simple 
and  can  be  completed  In  a  few  seconds  on  the  ground 
or  In  the  air.  However,  the  boreslght  Is  difficult 
to  perform  accurately  because  a  small  head  movement 
produces  a  relatively  large  HMS  reticle  movement  on 
the  HDD.  This  problem  la  multiplied  when  trying  to 
boreslght  while  airborne  due  to  normal  aircraft 
vibration  and  turbulence. 

MULTIFUNCTION  DISPLAYS 

DESCRIPTION 

The  multifunction  displays  (MFD)  shown  In 
Figure  9  are  monochromatic  CXT-type  displays  capa¬ 
ble  of  presenting  a  high  contrast  Image  of  process¬ 
ed  video  to  the  pilot  In  a  high  ambient  cockpit 
lighting  environment  without  the  use  of  shades  or 
hoods.  The  displayed  video  la  used  to  assist  the 
pilot  in  performing  avionic  system  management 
functions  such  aa  sensor  system  monitoring  and 
control,  stores  management  mode  selection,  weapon 
aiming,  etc.  The  control  function  is  provided 
through  the  use  of  20  option  selection  switches 
(OSS's)  contained  In  a  bezel  around  the  display 
screen  of  each  MFD.  The  keyswltch  panel  provides 
the  pilot  with  the  ability  to  lntaract  with  air¬ 
craft  avionics,  select  display  presentation  modes, 
and  adjust  the  display  Indicator  brightness, 
contrast,  and  symbology  intensity. 

The  awchanlzatlon  for  display  brightness  and 
intensity  is  quite  advanced.  Once  each  display 
mode  is  set  up,  a  ’memory"  condition  Is  established 
in  the  programmable  display  generator  (FDG)  such 
that  when  the  pilot  returns  to  that  particular 
mode,  a  readjustment  of  brightness,  contrast,  and 
symbology  intensity  will  not  be  necessary.  Four 
rocker-type  switches  on  each  MFD  allow  slewing 
action  to  increase  and  decrease  the  display  para¬ 
meters  as  required.  When  a  switch  is  depressed  up 
or  down,  the  PDG  software  will  slew  the  parameter 
chosen  until  the  switch  is  released.  This  allows 
the  switch  direction  and  position  to  be  digitally 
stored  in  "memory"  for  a  later  return  to  that  mode. 

The  MFD  features  a  raster-driven  CRT  which 
offers  the  advantage  of  low  power  consumption  and 
adaptability  to  video  recording  that  cannot  be 
accommodated  In  a  stroke  CRT  display  system. 
Standard  line-scan  video  and  sync  signals  are 
provided  to  the  displays  from  the  PDG.  The  MFD 
coawnlcates  by  digital  encoded  messages  to  the  PDG 
for  interactive  switch  information  and  the  bright¬ 
ness  slew  functions.  The  major  functional  sections 
of  the  MFD  Include  a  video  amplifier,  horizontal 
and  vertical  deflection  amplifiers,  s  high-voltage 
power  supply,  and  a  CRT/Yoke/Harmonlzation 


assembly.  The  CRT  la  a  4-inch  square  display  with 
a  hlgh-brlghtness  P-43  green  phosphor  capable  of 
providing  six  shades  of  gray  In  a  10,000  foot- 
lam  be  rt  ambient  light  condition. 


Flfuf*  9  'full  If  unction  Display* 

ASSESSMENT 

The  multifunction  feature  of  the  MFDs  and 
their  location  high  on  the  instrument  panel  result 
in  many  advantages  over  conventional  displays  and 
swltchology.  The  primary  advantages  are  listed 
below. 

1.  Probably  the  most  Important  advantage  is 
rapid  visual  acquisition  and  interpretation.  The 
MFDs  are  located  high  enough  on  the  instrument 
panel  that  normally  only  eye  movement  (rather  than 
timely  and  potentially  disorienting  head  movement) 
from  the  outside  scene  to  the  MFD  is  required. 
Although  this  time  savings  may  seem  small,  in  a 
tactical  environment  split  second  decisions  may 
mean  the  difference  between  success  and  failure. 

2.  The  short  distance  between  outside  scene 
and  MFD  make  target  reaqulsltion  much  easier. 

3.  The  MFDs  are  not  obstructed  visually  as  is 
sometimes  the  case  when  switches  or  displays  are 
located  low  on  the  Instrument  panel  or  on  the  side 
consoles. 

4.  The  MFDs  are  easily  accessed  with  either 
hand.  It  is  a  very  comfortable  and  natural  move¬ 
ment  to  go  from  either  the  stick  or  throttle  to  the 
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KFDa.  This  feature  reduce*  the  tiae  for  ivltch 
actuation  and  raaulta  In  aor*  rapid  weapon  system 
conflguraton  and  employment. 

5.  Spatial  dlaorientatlon  probleaa  are 
reduced.  Thi*  1*  achieved  by  moving  approximately 
40  awltchea  up  front  on  the  MFD*  and  elialnatlng 
the  potentially  disorienting  head  aoveaent*  to  look 
down  on  the  aide  console*. 

6.  The  multifunction  feature  of  the  MFD* 
resulted  In  a  reduction  of  display*  froa  six  to 
two,  and  a  reduction  of  switches  from  approximately 
60  to  46.  This  produced  a  "cleaner'*  cockpit  which 
Is  easier  to  manage  and  has  aore  rooa  for  systeaa 
growth. 

7.  The  MFD*  have  growth  potential  for  aore 
sansor/weapon  displays  and  avionics  control  func¬ 
tions. 

Although  there  were  aany  advantages  derived 
f row  che  use  of  MFDs,  there  were  also  soae  dis¬ 
advantages.  The  following  1*  a  list  of  the  less 
desirable  features. 

1.  The  MFDs  are  aore  complicated  than  dedi¬ 
cated  displays  and  control  panals.  As  an  example , 
pilots  asist  remember  non-dlsplayed  Information, 
sequences  of  operation,  short  smeaonlc  codes,  and 
operating  logic. 

2.  Some  MFD  functlona  nay  take  longer  to 
complete  than  the  corresponding  function  on  a 
dedlcted  panel.  An  example  Is  the  flight  control 
page.  In  production  F-16s,  a  flight  control  mal¬ 
function  Is  assessed  by  glancing  at  a  dedicated 
flight  control  display.  In  AFTI,  aa  many  as  three 
switch  actions  nay  be  required  to  call  up  the  same 
display. 

Overall,  the  advantagea  of  the  MFDe  far 
outwnlght  the  disadvantages.  The  MFDs  create  a 
aor*  easily  managed  cockpit  allowing  the  pilot  to 
optimise  the  avionics  and  wsapona  available.  In 
addition,  the  MFDa  can  accomodate  more  sy sterna 
growth  In  the  future. 

MFDs  are  presently  being  Installed  on  produc¬ 
tion  F-16*.  These  MFDs  do  not  control  as  aany 
systems  aa  the  present  AFTI  configuration. 

VOICE  COtMAND  SYSTEM 

Perhaps  no  other  technology  aboard  the  AFTI/ 
F-16  has  captured  the  Imaginations  of  aerospace 
watchers  aa  has  voice  command.  The  public  envis¬ 
ions  a  futuristic  cockpit  wherein  a  laid-back 
fighter  pilot,  probably  played  by  Robert  Bedford, 
Intones  the  words,  "Cear  down."  An  external  scene 
of  the  airplane  then  shows  the  landing  gear  exten¬ 
ding,  and  the  airplane  turns  sway  froa  the  camera 
and  lands  Into  the  setting  sun  while  closing 
credits  flash  on  the  screen. 

Such  a  system  could  be  Implemented  today.  In 
which  the  landing  gear  would  extend  upon  receipt  of 
the  pilot's  verbal  commend.  With  present  word 
recognition  rates,  however,  the  airplane  would 


experience  so  many  gear-up  landings  that  It  would 
also  have  to  be  equipped  with  a  Teflon  belly. 

In  Phase  I  (the  digital  flight  control  devel¬ 
opment  phase)  of  the  AFTI/F-16  flight  test  program, 
we  looked  at  two  early  designs  of  an  airborne  voice 
recognition  system.  Each  design  encompassed  a  34 
word  vocabulary  which  was  not  noded  or  compartmen- 
ted;  that  Is,  when  a  word  was  spoken,  the  recogniz¬ 
er  had  to  scan  the  entire  vocabulary  In  an  attempt 
to  find  the  desired  word.  Recognition  rates  were 
assayed  at  one,  two,  three,  four,  and  five  g's. 
Words  had  to  be  spoken  Individually;  there  was  no 
connective  speech  recognition  capability. 

The  primary  finding  of  the  Phase  I  voice 
coMand  flight  testing  was  that  recognition  rates 
were  unsaf isfactory  but  did  demonstrate  feasa- 
blllty.  Rates  at  one  g,  using  the  best  system 
evaluated,  varied  from  81  to  over  92  percent  among 
the  five  pilots  tested.  If  these  had  been  baseball 
batting  averages,  they  would  have  been  excellent; 
in  the  operation  of  a  fighter  airplane  they  were 
unaccepatble.  Bland  Smith  just  spoke  of  the  battle 
being  won  by  the  most  manageable  cockpit .  In  a 
battle  environment.  Indeed  In  any  airborne  situa¬ 
tion,  95  percent  word  recognition  Is  unacceptable. 
The  desired  recognition  percentage  Is  100;  some¬ 
thing  slightly  less  may  be  acceptable. 

In  the  current  phase  (AMAS)  of  the  AFTI/F-16, 
we  are  evaluating  a  more  advanced  recognition 
scheme.  One  advanced  feature  Is  that  the  vocabu¬ 
lary  Is  noded  or  compartmented  so  that  at  the  first 
word  or  phrase  the  recognizer  hears,  It  transfers 
Into  a  node  of  limited  vocabulary.  For  example,  if 
the  pilot  says,  "Radar,"  the  word  recognizer  takes 
the  system  to  the  radar  node.  In  this  node,  after 
the  next  command,  the  recognizer  has  to  scan  only 
for  words  that  would  be  applicable  to  radar  opera¬ 
tion.  Theoretically,  this  compartmentlng  should 
lead  to  higher  recognition  rates. 

Another  feature  of  the  second  generation 
recognition  system  currently  being  evaluated  Is 
connective  speech  capability.  If  It  was  desired  to 
enter  a  new  destination  latitude  Into  memory  using 
the  Phase  I  recognizer.  It  was  necessary  for  the 
user  to  say,  "North. . .three. . .four .. .five. . . 
seven. . .zero,"  with  a  pause  for  recognition  between 
each  word.  With  the  connective  speech  capability. 
It  Is  hoped  that  the  pilot  can  say  the  entire 
latitude  without  pauae  and  have  It  recognized. 

As  stated  earlier,  there  was  agreement  among 
the  pilots  who  evaluated  Phase  I  voice  conund  that 
the  recognition  rate  was  unacceptable.  But  there 
was  very  little  evaluation  of  voice  command  In 
tactical  situations  and  very  little  speculation 
among  pilots  as  to  what  tasks,  If  accomplished  by 
voice  command,  would  most  benefit  the  pilot.  One 
task  that  hat  almost  universal  acceptance  among 
pilots  as  a  candidate  for  voice  command  is  radio 
frequency  changing  while  flying  close  formation. 

In  this  case,  the  wlngman  resents  having  to  take 
his  eyes  off  the  lead  aircraft  for  even  a  split 
second  due  to  the  high  potential  for  a  midair 
collision.  Other  potential  uses  for  voice  command 
do  not  share  such  a  unanimous  approval.  Hopefully, 


om  of  the  contribution*  of  tha  currant  phaaa  of 
AFTI/F-16  tasting  will  ba  to  determine  uses  for 
voice  commsnd  that  make  tha  tactical  pilot's  Job 

aaslar . 

RIDE  QUALITIES  DURING  AUTOMATIC  WEAPON  DELIVER! 

Tha  prlnclpla  tactical  capability  under 
development  In  tha  AMAS  phase  of  AFTI/F-16  testing 
Is  autoaatic  bomb  delivery.  A  forward-looking 
Infrared  sensor  and  a  laser  range-finder  are  used 
for  precise  target  location  relative  to  the  air¬ 
craft.  Target  position  Is  than  Input  to  the 
autopilot  to  allow  autoaatic  lateral-toss  boab 
deliveries. 
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The  geometry  of  tha  lateral-toss  maneuver  Is 
shown  In  Figure  10.  At  engagement,  the  autopilot 
commands  a  combination  of  direct  side  force  (gener¬ 
ated  by  deflection  of  the  canards  and  rudder)  and 
bank  angle  to  achieve  the  required  offset  angle  for 
the  maneuver.  Figure  11  shows  a  typical  level  of 
lateral  acceleration  used  to  develop  offset  angle. 
As  the  maneuver  progresses,  direct  side  force  again 
la  used  to  fine-tune  the  offset  geometry  lMedi- 
ately  prior  to  banking  for  the  curvilinear 
steering. 


V  Tergal 


Figure  10  Lateral-Toss  Bomb  Delivery  Geonetry 


Figure  11  Acceleration  During  Automatic 
Lateral-Toes  Bomb  Maneuver 

This  direct  side  force  was  used  In  the  mane¬ 
uver  because  It  was  available  In  the  aircraft  and 
because  the  lateral  toss  maneuver  was  a  task  In 
which  to  display  Its  effectlvlty  in  changing 
heading.  It  was  Incorporated,  however,  without 
regard  for  Its  effect  on  the  pilot's  spatial 
orientation. 

When  a  pilot  Is  flying  In  wlngs-level  flight 
with  no  lateral  acceleration,  the  only  acceleration 
sensed  by  him  is  grsvlty  (Figure  12a).  With  the 
addition  of  direct  side  force,  however,  lateral 
acceleration  causes  the  acceleration  vector  to  tilt 
(Figure  12b).  In  daylight,  in  good  visibility,  the 
pilot  can  see  the  horizon  and  then  knows  that  he  Is 
In  wlngs-level  flight  with  lateral  acceleration 
present.  In  poor  visibility  or  at  night,  however, 
the  pilot  perceives  the  acceleration  vector  to  be 
pointing  toward  the  center  of  the  earth,  and  he 
therefore  misinterprets  his  roll  attitude  to  be 
banked  (Figure  12c).  This  spatial  disorientation 
will  be  uncomfortable  at  best,  but  under  such 
conditions  as  low  altitude  and  high  speed,  will  be 
intolerable  and  will  result  In  aborted  weapons 
delivery  runs. 
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Figure  12a  Acceleration  Acting  on  an  Airplane 
In  Straight  and  Level  Flight 


angle  for  generating  turning  flight  prior  to  the 
conclualon  of  the  AKAS  phaae  In  order  that  the 
pllota  nay  evaluate  Its  ride  qualities. 

In  fact,  even  control  lawa  using  only  bank 
angle,  when  applied  by  an  autopilot,  can  Induce 
roll  dleorlentatlon  through  uae  of  laproper  roll 
accelerations.  It  la  our  hope,  however,  that  the 
elimination  of  direct  side  force  will  provide  a  aet 
of  control  laws  that,  with  tuning,  are  aultable  for 
autopilot  uae  at  night  or  In  low  visibility. 

COLOR  MOVING  MAP 

Before  tactical  aircraft  were  equipped  with 
Inertial  navigation  systeaa,  the  tactical  pilot 
spent  a  great  deal  of  hi a  tlae  lost.  At  low 
altitude,  hla  radio  navigation  equipment  was  not 
functional,  and  he  found  that  navigation  by  aap 
alone  at  low  altitude  and  high  speed  la  a  difficult 
and  sometimes  Impossible  teak. 

The  availability  of  Inertial  navigation  has 
ralleved  the  pilot  of  being  coapletely  Ignorant  of 
hla  location.  It  la  still  necessary,  however,  for 
the  pilot  to  carry  a  map  to  correlate  the  terrain 
he  la  flying  over  to  that  which  he  should  be  over. 
Cross-checking  this  map  while  maintaining  control 
of  the  airplane  requires  great  skills  such  as  being 
able  to  fly  the  airplane  by  holding  the  stick 
between  one's  knees.  The  color  moving  map  will 
eliminate  the  necessity  for  those  skills  by  placing 
the  nap  on  a  five-inch  cathode  ray  tube  mounted  In 
the  Instrument  panel  (Figure  13). 


Figure  12b 


Resultant  Acceleration  on  an  Airplane 
In  Hlnga-Level  Flight  With  Lateral 
Acceleration  Present 


Flgure  12c 


Perceived  Bank  Angle,  Unbanked  Flight 
With  Lateral  Acceleration,  No  Actual 
Horlxon  Visible 


The  author  has  been  aware  of  this  potential 
for  disorientation  since  the  Initial  design  of  the 
AMAS  control  laws  but  has  not  yet  been  successful 
la  having  the  lateral  acceleration  tern  removed 
from  the  steering  algorithm.  It  la  planned  to 
Install  a  set  of  control  lawa  utilising  only  bank 


N-SJnch  multifunction 
color  display 


Figure  13  AFTI/F-16  Instrument  Panel 
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The  nap  tram  late*  so  as  Co  continuously 
present  the  terrain  over  which  the  airplane  Is 
flying.  The  aap  has  the  capability  to: 

1 •  Place  the  aircraft  reference  symbol  at  the 
edge  of  the  aap  eo  chat  the  entire  aap  presents 
terrain  forward  of  the  aircraft  (Figure  14a)  or  to 
place  the  aircraft  reference  syabol  at  the  center 
of  the  aap  so  that  the  pilot  aay  correlate  features 
to  the  sides  or  aft  of  the  aircraft  (Figure  14b). 

2.  Present  the  aap  with  track  up  which 
arients  the  terrain  on  the  aap  siallarly  to  the  way 
It  appears  when  looking  out  the  windscreen  or  to 
present  the  aap  with  north  up  (Figure  14c)  which 
tllows  for  convenient  reading  of  place  names  and 
slevatlons. 

. 'li:i . * . i . *4 
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5.  Present  a  map  of  the  deetlnatloo  rather 
than  the  aircraft'a  present  position.  In  order  that 
the  pilot  may  familiarize  hlaself  with  terrain  or 
cultural  features  surrounding  his  destination  prior 
to  reaching  It. 


The  color  moving  aap  Is  at  present  a  digital 
portrayal  of  a  printed  asp,  read  froa  a  flla  strip. 
It  Is  very  usable  In  Its  present  aschanlxatlon 
although  It  currently  Is  able  to  carry  only  two 
scale  options,  either  10  x  10  and  40  x  40,  or  20  x 
20  and  80  z  80  allea.  The  aap,  as  presently 
aechaalsed,  also  possesses  Insufficient  brightness 
for  use  In  bright  daylight.  A  subsequent  version 
of  the  color  CUT  Is  planned  to  correct  this 
deficiency. 


The  pending  aachanlsatloo,  to  be  flight  tasted 
this  spring,  will  store  and  reconstruct  terrain 
elevation  and  cultural  data  froa  a  Defenss  Mapping 
Agency  database.  This  aap  will  have  the  ability  to 
display  slope  shading,  to  vary  the  Interval  of 
contour  lines,  to  present  all  terrain  above  the 
aircraft's  present  altitude  In  a  contrasting  color 
and  to  provide  an  Infinite  maber  of  scales. 


C-IKDUCED  LOSS-OF-COKSCIOUSMESS  AMD  SPATIAL 
DXSOUEMTATION  AUTO-EECOVEEY  SYSTEM 


altitude,  attitude,  and  the  set  recovery  altitude 
and  do  not  depend  upon  any  deteralnatlon  of  pilot 
physiological  condition.  Initiation  of  the  recovry 
maneuver  Is  preceded  by  visual  and  aural  warnings 
which  continue  until  the  pilot  resumes  control. 

The  auto-recovery  maneuver  consists  of  a  roll  to 
wlngs-level  and  a  S  g  pull  to  level  flight  alti¬ 
tude-hold.  The  pilot  always  has  the  capability  to 
override  or  disengage  the  auto-recovery  maneuver. 

This  system  provides  the  pilot  protection  from 
ground  collision  In  most  air-to-air  training 
environments. 

Flight  testing  began  at  Edwards  AFB  on 
February  20,  1986.  The  basic  auto-recovery  system 
Including  displays  and  warnings,  operated  correctly 
froa  the  beginning  of  flight  test.  At  most  dive 
angles  and  airspeeds,  the  auto-recovery  maneuver 
was  satisfactory.  Some  Improvements,  however,  will 
be  made  at  steep  dive  angles  where  the  system  Is 
too  conservative  when  upright  and  results  In  some 
penetrations  of  the  floor  when  Inverted. 

As  a  result  of  flight  tests,  the  auto-recovery 
system  la  operational  on  the  AFT1/F-16  providing 
protection  to  the  pilot  when  required.  Flight 
testing  of  the  auto-recovery  system  will  continue 
through  Spring  1986  as  changes  are  made  to  Improve 
system  performance. 

ASSESSMENT 

Unlike  programs  being  pursued  to  find  a 
suitable  physiological  senaor  of  loss-of-con- 
sclouaness,  an  auto-recovery  system  based  upon 
aircraft  altitude,  attitude,  and  airspeed  in 
relation  to  a  set  recovery  altitude  la  applicable 
to  most  cases  of  spatial  disorientation  and  loss- 
of-consclousness.  The  AFTI/F-16  auto-recovery 
system  Is  based  upon  a  pilot-selected  MSL  altitude 
floor  and  Is  operational  today.  This  syatsm  should 
be  lncorporsted  Into  current  tactical  aircraft  as 
soon  as  possible. 

As  long  as  system  operstlon  Is  lndlcsted  to 
the  pilot,  the  auto-recovery  system  need  not  be 
redundant  or  require  extensive  aircraft  modifi¬ 
cations.  Uhen  Incorporated  on  a  tactical  aircraft, 
the  system  will  use  a  computer  to  determine  whan 
the  auto-recovery  Is  required;  an  autopilot  to  fly 
the  recovery,  and  an  appropriate  pilot  vehicle 
Interface . 

Future  auto-recovery  systems  should  be 
developed  to  use  ACL  altitude  which  will  provide 
automatic  operation,  increased  authority,  and 
combat  capabilities. 
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A  g-lnduced  lose-of-consciousnesa  (CLOC)  and 
spatial  disorientation  auto-recovery  system  has 
been  developed  and  tested  on  the  AFT1  aircraft. 

The  pilot  controls  the  operation  of  this  system  by 
entering  an  MSL  altitude  and  manually  arming  the 
system.  Engagement  conditions  of  the  auto-recovery 
maneuver  ara  controlled  by  aircraft  apeed, 


The  following  Is  a  summary  of  the  workload 
aspects  of  the  FVI  in  regard  to  the  new  tech¬ 
nologies  tested  on  the  AFTI/F-16. 

HIDE  F1ELD-OF-VIEH  HEAD  UF  DISPLAY 

AFTI  pilots  wars  unanimous  In  their  prslsa  of 
the  wide  FOV  feature  of  the  AFTI  HUD.  The  AFTI  HUD 


minimises  aircraft  aanauvarlng  to  locata  target*/ 
ataarpointa,  displays  laaa  cluttered  symbology,  and 
allow a  rapid  dlaaaal nation  of  displayed  HUD  infor- 
aatlon  without  head  movements.  The  pilota  alao 
liked  the  digital  alrapeed,  altitude,  and  heading 
diaplaya  but  feel  it  la  necaaaary  to  keep  the 
analogue  diaplaya  for  trend  information.  The 
analog  ecale  lncreaenta  waa  the  only  AFTI  HUD 
feature  the  pilota  did  not  like. 

The  WFOV  HUD  ia  now  being  uaed  on  the  produc¬ 
tion  F-16.  The  digital  diaplaya  of  alrapeed, 
altitude,  and  heading,  and  the  new  analog  acale 
lncreaenta  were  not  used • 

AUTOMATED  MANEUVERING  ATTACK  SYSTEM/ SENSOR  TRACKER 
SET 

The  AFTI  pilota  found  the  AMAS  ayatea  alaple 
to  uae  and  tactically  aound  in  lta  aechanlzation. 
Aaaualng  the  problaaa  with  the  STS  are  overcome, 
the  AMAS  air-to-ground  weapona  delivery  node  holda 
great  proaiee  for  ncreaelng  aurvlvablllty,  reducing 
workload,  lncreaalng  accuracy,  and  providing  an 
additional  night  capability. 

MASTER  MODES 

The  aaater  node  function  algnlflcantly  reducea 
pilot  workload  while  optialxlng  aircraft  perform¬ 
ance.  AFTI  pilota  found  thla  concept  to  be  both 
alaple  to  uae  and  effective  for  improving  weapon 
ayatea  effectlveneee. 

The  uae  of  aaater  aodea  for  the  “pre- 
prograamed*  avlonlca  aet  up  haa  been  incorporated 
in  the  production  F-16.  Taak  tailoring  the  flight 
control  lawa  la  planned  once  the  production  F-16 
haa  a  digital  flight  control  computer. 

HELMET  MOUNTED  SIGHT 

The  HMS  la  alaple  and  natural  to  uae,  but  lta 
effectlveneaa  cueing  the  STS  haa  been  limited. 

Theee  llalta  are  due  to  lnaccuraclea  in  bore- 
sighting  the  HMS  and  STS,  loss  of  HMS  boreslght  due 
to  helaat/vlsor  movement  on  the  pilots  head,  and 
inaccurate  sensing  of  the  HMS  orientation  If  uaed 
in  a  position  other  than  the  boreslght  position. 

The  HMS  haa  great  potential  for  reducing  pilot 
workload  If  the  problems  described  above  can  be 
resolved. 

MULTIFUNCTION  DISPLAYS 

The  MFDa  create  a  more  easily  managed  cockpit 
allowing  the  pilot  to  optimize  the  avionics  and 
weapons  avails*'*.  These  advantages  were  achieved 
by  moving  the  MFDa  high  up  on  the  front  Instrument 
panel,  asking  them  easy  to  access  both  visually  and 
physically.  The  multifunction  aspect  of  the  KFDs 
alao  reduce  the  number  of  diaplaya  and  switches  In 
the  cockpit,  allowing  for  more  systems  growth  In 
the  future. 

These  advantages  far  outweigh  the  dis¬ 
advantages  of  more  complicated  operation  and 
sometimes  a  longer  time  to  complete  a  function - 


MFDa  are  presently  being  installed  on 
production  F-16s.  These  MFDa  do  not  control  aa 
many  systems  as  the  present  AFTI  configuration. 

VOICE  COMMAND  SYSTEM 

AFTI  pilota  agree  the  voice  command  ayatea 
must  have  a  recognition  rate  close  to  100  percent 
in  order  to  be  useful.  During  the  first  phase  of 
testing,  recognition  rates  were  between  80  and  90 
percent.  The  next  phase  of  testing  will  be  trying 
to  Improve  the  recognition  rate  and  determine  the 
uaefullness  of  voice  coMand  in  realistic  tactical 
scenarios. 

RIDE  QUALITIES  DURING  AUTOMATIC  WEAPON  DELIVERY 

AFTI  pilota  were  satisfied  with  the  ride 
qualities  during  automatic  weapon  delivery  with  the 
exception  of  direct  side  force.  Pilots  are  con¬ 
cerned  that  the  direct  side  force  will  cause 
disorientation  at  night  or  in  low  visibility 
testing.  New  control  laws  without  direct  side 
force  will  be  tested  prior  to  the  conclusion  of 
AMAS  phase. 

COLOR  MOVING  MAP 

All  AFTI  pilots  agree  the  color  aovlng  amp  is 
very  useful  for  reducing  pilot  workload  for  navi¬ 
gation  and  situation  awareness.  A  digital  aap  will 
be  tested  soon  to  try  and  improve  terrain  and 
cultural  feature  recognition. 

G- INDUCED  LOSS  OF  CONSCIOUSNESS  AND  SPATIAL 
DISORIENTATION  AUTO-RECOVERY  SYSTEM 

The  system  is  applicable  to  both  spatial 
disorientation  and  loss-of-consclousness  situations 
and  will  auto-recover  the  aircraft  based  on  air¬ 
craft  altitude,  airspeed, and  attitude  in  regard  to 
a  set  recovery  altitude.  The  CLOC  system  is  very 
promising  for  reducing  aircraft  losses  and  will  be 
flight  tested  on  AFTI  starting  in  Feb  86. 


STANDARDIZED  AVIONICS  INTEGRATED  FU7”' 


Walter  G.  Smith 


Joseph  P.  Boone 


Air  Force  Armament  Laboratory 
Eglin  AFB,  FL 

The  Standardized  Avionics  Integrated 
Fuzing  (SAIF)  concept  is  to  optimize  weapon 
effectiveness  and  minimize  pilot  tasks  and 
and  flight  limitations  using  avionics  to 
compute  in  real-time  release  parameters 
such  as:  time  to  release,  submuni ticn  ejection 
force,  time  from  release  to  fin  deployment, 
submunition  release  time,  parachute 
deployment  time,  and  rocket  firing  time. 
Presently  these  parameters  are  set  prior 
to  the  flight  and  cannot  be  changed  in 
flight.  SAIF  payoffs  are  in  the  area  of 
operational  flexibility  and  optimal  weapon 
fuzing  while  removing  the  flight  restrictions 
inherent  in  present  fixed  fuze  weapon 
deliveries.  The  SAIF  demonstration  uses 
the  AFTI/F-16  weapon  delivery  system 
and  a  digital  fuzing  system  module  for  a 
Tactical  Munitions  Dispenser  (TMD).  This 
demonstration  is  limited  to  a  TMD  weapon  but 
the  concept  is  transferable  to  other  fuzed 
munitions  including  the  MK-80  series  of 
general  purpose  bombs.  The  munition  used  for 
the  AFTI  demonstration  is  a  CBU-89  consisting 
of  a  SUU-66  dispenser  filled  with  91*  Gator 
mines. 

BACKGROUND 

Because  existing  fuzes  for  Tactical 
Munitions  Dispensers  (TMD's)  must  be  ground 
set  for  specific  delivery  conditions  and 
targets,  the  aircraft  weapon  delivery 
parameters  and  targets  are  also  fixed  prior 
to  takeoff.  SAIF  will,  however,  have  the 
capability  of  functioning  as  an  avionics-set 
impact/delay  fuze  or  an  avionics-set 
dispenser  timer.  A  fuze  with  an  avionics-set 
capability  is  needed  in  the  near  term  to 
eliminate  the  inflexibility  of  current  fuzes 
and  timers  which  must  be  ground  set,  and, 
therefore,  allow  only  very  limited  tactical 
flexabllity  in  the  severely  hostile  and 
diverse  target  environments.  In  the  far 
tern,  this  avionics-set  fuze  is  on  the 
critical  path  to  achieving  the  capability  for 
unconstrained  weapons  delivery  while 
maneuvering  the  aircraft.  SAIF  will  fully 
utilize  the  computer  capability  of  current 
aircraft,  thus  reducing  the  complexity  of 
fuzes/timers,  and  will  significantly  reduce 
the  requirement  for  ECM-susceptible  dispenser 
proximity  sensors.  The  provision  for 
accurate  and  timely  bomb  and  dispenser  fuze 
settings  at  weapon  release  will  increase 
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tactical  flexibility,  weapon  effectiveness, 
and  aircraft  survivability.  Real-time  update 
of  dispenser  fuze  settings  will  permit  better 
submunition  pattern  control  and  enhance 
multiple  target  kill  capability. 

SAIF  CONCEPT 


The  principal  elements  of  the  SAIF  concept 
are  illustrated  in  Figure  1.  Information  on 
the  target  (type  and  position  relative  to  the 
aircraft)  and  aircraft  state  are  input  from 
the  aircraft  avionics  Into  the  Plre  Control 
Computer  (FCC)  fuzing  algorithm  The  computer 
calculates  optimum  fuzing  parameters  for  the 
selected  target  and  actual  release  conditions. 
Depending  on  the  particular  munition  under 
consideration  the  fuzing  parameters  calculated 
could  Include,  time  from  release  to  fin 
deployment,  submunition  ejection  force, 
submunitlon  dispense  time,  paraohute 
deployment  time,  and  rocket  firing  time,  and 
others.  In  the  case  for  the  TMD,  pattern 
control  over  a  range  o t  delivery  conditions  is 
achieved  by  varying  tlme-to-start  spin 
(freefall)  and  spin  rate,  and  these  two 
coenands  are  calculated  and  sent  to  the  TMD 
via  a  MIL-STD-1760  interface  Just  prior  to 
weapon  release. 
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Figure  i.  SAIF  Concept  Elements 

The  SAIF  concept  can  be  extrapolated  to 
provide  fuze  control  to  unitary  warhead  bombs. 
Employed  on  the  MK-82,  for  example,  SAIF  could 
control  safe  separation  timing  thereby 
allowing  lower  altitude  delivery  than  with 
existing  fuzes.  Deployment  time  of  the  drag 


MIL-STD-1760  Interface 


(retardation)  device  on  the  MK-82  could  be 
controlled  by  SAIF,  and  thus  provide  control 
of  Impact  angle  with  weapon  effectiveness 
being  strongly  Influenced  by  impact  angle. 

TACTICAL  MUNITION  DISPENSER  (TMD) 

The  TMD  is  a  1000  pound-class,  unpowered 
and  ungulded  ballistic  trajectory  weapon. 

See  Figure  2.  It  is  opened  by  a  linear¬ 
shaped  charge  explosive  cutting  network 
Initiated  by  the  fuzing  system  after  safe 
separation  and  after  achieving  a  preset  time, 
Height  of  Burst  (H08),  or  spin  rate.  The 
dispenser  function  event  for  the  current  TMD 
can  be  controlled  in  one  of  three  modes.  A 
FZU-39/B  proximity  sensor  provides  a  fixed 
Height  of  Burst  (HOB);  a  variable  delay  timer 
provides  a  fixed  time  to  dispense;  or  a 
centrifugal  force-activated  spin  allow  the 
pilot  to  select  the  dispenser  function  mode. 
The  variable  time  and  spin  rate  parameters, 
as  well  as  the  HOB  selected  for  the  FZU-39/B, 
must  be  preset  on  the  ground  by  switches 
located  on  the  munition.  The  timer  can  be 
set  from  0.64  to  4.32  seconds  in  12 
increments  to  provide  dispenser  function  and 
arming  signals.  The  spin  switch  has  six 
incremental  settings  from  0  to  2500 
revolutions  per  minute  (RPM).  The  FZU-39/B 
proximity  sensor  provides  ten  Incremental 
settings  between  300  and  3000  feet  HOB.  The 
SAIF  fuze  module  will  provide  all  the 
functions  now  performed  by  the  timer  and  FZU- 
39/B,  but  will  be  optimally  set  and  will  not 
be  susceptible  to  countermeasures. 


Figure  2.  Modified  TMD 


The  TMD  functions  that  are  controlled  by 
SAIF  coamiands  via  the  MIL-STD-1760 
Interface  are  shown  in  Figure  3. 
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The  SAIF  designed  for  demonstration  an  a 
modified  T*~tical  Munitions  Dispenser  (TMD) 
contains  a  .IL-STD-1760  electrical  interface 
to  the  AFTI/F-16,  a  controller,  a  power 
converter,  and  an  interface  to  the  TMD 
electromechanical  fuze.  As  part  of  the  MIL- 
STD-1760  interface,  a  dual  MIL-STD-1553B  mux 
bus  conveys  fU:  Ing  data  to  the  SAIF,  wbioh  in 
turn  provides  time-to- fin-cant  and  HOB  fire 
pulses  to  the  TMD. 

The  SAIF  module  is  configured  as  a  standard 
avionics  mux  bus  terminal.  It  receives 
commands  from  the  aircraft,  performs  standard 
MIL-STD-1553  functions  including  error 
checking,  and  sends  data  to  the  aircraft. 

Data  sent  to  the  aircraft  includes  a 
reflection  of  received  commands  (wrap-around 
data)  and  results  of  SAIF  Internal  status 
check. 

The  SAIF  is  designed  with  standard  CMOS 
logic  circuits  and  commercially  available  LSI 
integrated  circuits  to  perform  the  MIL-STD- 
1553  mux  bus  control  functions.  A  Motorola 
MG146805E2  microprocessor  performs  controller 
functions.  Pre-release  power  consumption  Is 
11  watts  and  post-release  power  consumption  is 
2.5  watts  (excluding  the  TMD  power  interface 
circuit,  post-release  power  is  16  milliwatts). 

This  Interface  is  exercised  by  selecting 
the  TMD  on  the  Multi-Function  Display  (MFD) 
(Figure  4).  The  pilot  then  selects  a 
dispersion  pattern  (Formation,  Truck,  Tank) 
via  the  MFD.  This  pattern  is  transmitted  via 
the  D  Mux  to  the  FCC.  The  FCC  calculates  the 
time  to  release  submuniticns  and  the  release 
altitude  based  on  target  position  and  flight 
conditions  and  sends  this  data  to  the  MFD  for 
display  to  the  pilot.  Simultaneously,  the  FCC 
sends  to  the  SAIF  the  time  to  release 
submunitions.  This  "time  to  release"  is 
computed  and  sent  to  the  TMD  at  25  Hz. 

The  modified  TMD  upon  receiving  the 
submunition  release  time  buffers  the 
Information  for  transfer  to  the  fuze  upon 
receipt  of  a  release  command.  The  SAIF  then 
wraps-around  the  submunitian  release  time  to 
the  FCC  and  sends  a  status  word  containing  the 
results  of  an  internal  self-test  routine.  The 
FCC  verifies  that  the  wrapped-around  data  and 
self  test  results  are  correct  and  acceptable. 
If  not,  the  SMS  will  not  allow  the  TMD  to  be 
released.  The  weapon  release  procedure  is 
consistent  with  that  of  the  F-16  automatic 
weapon  release  method.  The  Head-Up  Display 
(HUD)  fuze  arming  cue  is  mechanized  to  show 
the  pilot  that  there  was  sufficient  altitude 
for  the  weapon  to  function  properly.  If  there 
is  insufficient  altitude,  the  FCC  notifies  the 
SMS  to  inhibit  release.  The  SMS  will  then  not 
allow  the  TMD  to  be  released.  The  SMS  also 
provides  Inventory  control  on  the  MFD. 


Figure  3.  TMD  Functions 
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lap  lamentation  of  the  SAIF  concept  on  an 
operational  baala  la  dependent  upon. the 
availability  of  a  atandard  Interface;  that  la, 
the  Interface  cannot  be  a  "unique  fuze  only" 
interface.  There  la  no  way  that  any  one 
weapon  concept  can  Juatlfy  funding  the 
inatallation  of  the  MIL-STD-1760  interface. 
The  AFTI/F-16  experience  ahowed  the  neceaaity 
for  a  dedicated  weapon  mux  for  a  "clean" 
implementation  of  MIL-STD-1760.  The 
interoperability  payoff  in  coat  reductiona 
due  a  cocanon  interface  ia  enormous  but  is 
even  exceeded  by  the  coat  reductions  due  to 
increased  weapon  effectiveness. 


Figure  U.  SAIF  Page  on  MFD 


AFTI/F-16  EFFECTIVENESS  ANALYSIS 

An  lndepth  analysis  of  the  ability  of  SAIF 
to  increase  the  effectiveness  of  a  wide  range 
of  weapons  including  the  TMD  indicated 
significant  potential.  The  effectiveness 
improvements  which  could  be  expected  by 
adding  an  automated  maneuvering  attack 
capwoxlity  were  also  estimated.  Figure  5 
summarizes  theae  estimates  for  two  unitary 
aubmunitlons.  Improvements  attrlbutablle  to 
automated  maneuvering  delivery  are  due  to  a 
reduced  attrition  rate. 


Figure  5.  Relative  Effectiveness 
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APTT/F-ll  VOICE  INTERACTIVE  AVIONICS 


P.  Allan  Roeenhoover 
General  Dynamics,  Port  Worth,  Texas 


ABSTRACT 

The  integration  of  voice  technology  into  tactical 
fighters  is  an  attempt  to  provide  the  pilot  with  Increased 
capabilities.  The  AFTI/F-16  Voice  interactive  Avionics 
(VIA)  program  encompasses  the  development  of  voice 
applications  to  (1)  reduce  pilot  workloads,  (2)  increase 
survivability  by  allowing  more  time  for  hands-on/head- 
out  flying,  and  (3)  allow  the  pilot  to  expand  his  mission 
capabilities. 

This  paper  will  discuss  the  integration  of  voice  in  a 
fighter  environment,  including  workload  assessments  and 
the  approach  used  to  solve  the  workload  demands  on  the 
pilot.  Tasks  within  the  crewstatlon  are  identified  accord¬ 
ing  to  their  ability  to  increase  the  pilot's  awareness  of  his 
environment  and  ability  to  maintain  his  mission 
objectives  with  minimal  error.  A  discussion  of  the  areas 
of  evaluation  during  various  mission  profiles  will  be 
presented  to  establish  interactive  needs  for  mission 
success.  Included  will  be  an  explanation  of  problems 
associated  with  establishing  this  technology  in  today's 
tactical  fighters. 


INTRODUCTION 

Numerous  studies  and  observations  have  been  made 
in  previous  years  to  evaluate  methods  of  helping  the  pilot 
perform  his  mission  with  increased  efficiency  and  effee- 
tivity,  thus  decreasing  his  workload.  The  pilot  is  exposed 
to  several  environments  in  his  cockpit  and  each  affects 
his  performance  and  mission  objectives  in  some  way. 
Two  key  environments  that  have  a  significant  influence 
on  the  pilot  are  the  operational  and  work  environments 
(See  Figure  1).  His  brain  has  to  be  able  to  process  the 
information  available  to  him,  whether  it  comes  from  his 
eyes  or  ears,  and  be  able  to  translate  that  information 
into  reactions  that  will  control  his  hands,  feet  or  voice  at 
the  appropriate  time.  One  of  the  main  purposes  of 
today's  technology  is  to  aid  the  user  by  Increasing  his 
capability.  For  that  reason,  the  addition  of  voice  tech¬ 
nology  to  a  fighter  pilot's  cockpit  is  our  goal.  The  pilot's 
mission  survivability  during  high  workload  conditions  is 
highly  dependent  on  how  well  he  is  able  to  perform  a  task 
and  not  deviate  from  his  objective,  if  he  is  able  to  keep 
his  hands  on  the  controls  and  his  head  out  of  the  cockpit, 
the  higher  his  chances  will  be  for  a  successful  mission, 
therefore  allowing  him  to  increase  his  mission  capability. 

The  objective  of  the  APTI/F-18  VIA  program  is  to 
identify  ways  that  will  help  to  reduce  the  pilot's 
workload.  For  voice  technology  to  be  fully  effective, 
additional  objectives  must  be  emphasized. 
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Figure  1  Workload  -  The  Total  Demand  Placed  on  the 
Pilot 


PREVIOUS  EXPERIMENTS 

Voice  technology  has  been  investigated  on  the 
AFTI/F-16  Program  for  a  number  of  years.  Sequential 
phases  of  study  and  evaluation  have  been  conducted  since 
the  late  70's.  The  initial  phase,  Phase  0,  (See  Figure  2) 
was  started  as  a  cooperative  effort  between  General 
Dynamics  and  Lear  Siegler,  Inc.  (LSI)  in  1978.  Human 
factor  studies  were  conducted  initially  to  determine  the 
need  for  voice,  technology  in  a  fighter  cockpit.  These 
studies  helped  in  the  development  of  a  data  base  for  the 
environment  that  a  pilot  would  be  exposed  to. 
Subsequent  phases  of  voice  technology  investigation  built 
on  these  studies. 

Phase  I  involved  the  flight  demonstration  of  voice 
technology  in  a  fighter  environment.  A  second  vendor, 
ITT  Defense  Communications  Division  (ITT/DCD),  was 
added  to  this  cooperative  effort  to  introduce  their 
approach  to  word  recognition.  Upon  completion  of  the 
Phase  I  program,  the  results  clearly  indicated  that  voice 
in  the  tactical  environment  would  work,  and  that  speech 
synthesis  should  be  added;  thus,  the  introduction  of  Voice 
Interactive  Avionics  (VIA). 


Figure  3  AFTI/F-1#  Vote*  Interactive  Program 
Roadmap 


VOICB  APPLICATIONS  STUDY 

Once  the  decision  was  made  during  Phase  I  that 
voice  would  actually  work  in  the  airborne  environment, 
the  next  step  was  to  determine  the  utility  of  the  tech¬ 
nology.  Between  Phases  I  and  II,  a  study  of  interactive 
voice  was  conducted  to  prioritize  candidate  tasks  where 
voice  technology  would  best  aid  the  pilot. 

One  key  issue  was  kept  in  mind  during  this  study, 
that  voice  not  only  had  to  perform  various  tasks  in  the 
crewstation,  but  it  had  to  relieve  the  pilot  of  much  of  his 
workload.  The  mechanization  should  be  viable  enough 
that  the  use  of  voice  would  be  intuitive.  Therefore,  the 
vocabulary  had  to  be  familiar  to  the  pilot  for  the  appli¬ 
cation  usage.  If  the  pilot  had  to  learn  a  new  vocabulary 
or  method  of  delivery,  the  objectives  of  voice  utilization 
would  be  defeated.  Therefore,  it  had  to  do  exactly  what 
the  pilot  wanted,  and  if  it  could  accomplish  the  task 
faster,  so  be  it.  A  preliminary  mechanization  approach 
of  the  voice  application  was  included  in  this  study.  Care 
was  taken  to  ensure  that  voice  would  not  only  perform 
the  task,  but  the  pilot  should  not  have  to  learn  something 
that  creates  a  workload  in  itself. 

In  addition  to  gathering  data  during  this  study,  a 
concerted  effort  was  made  to  define  a  flight  demon¬ 
stration  that  would  build  on  the  study  results.  For 
example,  the  pilot  would  have  to  be  placed  in  situations 
that  would  force  him  to  increase  his  workload,  and  the 
use  of  voice  would  hopefully  relieve  some  of  the  stress 
felt  during  the  workload.  The  effects  of  stress  will  also 
be  evaluated  during  flight  test  to  provide  the  voice 
industry  with  data  that  will  help  to  determine  how  stress 
in  the  cockpit  affects  the  speech  template,  or  voice 
patterns,  themselves. 

The  intent  of  integrating  interactive  voice 
technology  in  a  tactical  fighter,  is  not  only  to  perform 
selective  tasks  to  reduce  pilot  workload,  but  also  to  allow 
the  pilot  <nereaaingly  more  capabilities.  The  trend  in 
fighter  design  over  the  past  few  years  has  been  to  create 
a  cockpit  that  will  allow  multiple  functions  and  solve 
certain  Pilot/Vehicle  Interface  (PVI)  Issues  (See  Figure  3). 
We  are  building  cockpits  with  fewer  instruments  and 
switches,  and  at  the  same  time  trying  to  reduce  the 
dependence  on  a  hierarchical  data  structure.  If  voice  can 
solve  many  of  these  issues,  it  will  support  this  trend  in 
cockpit  evolution. 
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Figure  3  Evolution  Towards  Multifunction  Cockpits 
and  the  PVI  Implications 


As  part  of  the  study,  pilots  were  asked  to  evaluate  a 
given  mission  profile  to  (1)  determine  their  ability  to 
maintain  a  handa-on/head-out  capability,  and  (2)  deter¬ 
mine  their  ability  to  time-share  the  two  with  little 
mission  error  or  course  deviation.  Once  the  data  were 
compiled,  a  rating  of  the  various  mission  tasks  was 
created.  This  rating  helped  to  define  cockpit  tasks  where 
voice  should  be  evaluated  during  flight  test. 


PHASE  0  EXPERIMENTS 
Vendor  Selection 

A  decision  was  made  in  late  1983  to  start  the 
competition  for  the  Phase  II  VIA  development  and  flight 
test  program.  Figure  4  delineates  the  VIA  specifications 
used  for  the  competition.  However,  since  the  time  the 
specifications  were  written,  the  technology  had  advanced 
enough  that  those  requirements  no  longer  pushed  the 
present  day  technology.  The  9S%  word  recognition  goal 
is  no  longer  a  goal,  but  now  a  reality.  The  connected 
speech  capability  is  common  place.  Two  vendors  were 


•90%  RECOGNITION  PERFORMANCE 
•95%  GOAL 

*'G’  FORCE  RECOGNITION 
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•RESPONSE  TIME  LESS  THAN  0.5  SECONOS 

•  ALLOW  FOR  SLIGHT  DELAYS  BETWEEN  SWITCH 
DEPRESSION  ANO  VOICE  ENTRY 

•  LIMITED  CONNECTED  WORD  CAPABILITY  GOAL 

•  BUT  EFFECTS  OF  STRESS/ ANXIETY  ARE  UNKNOWN 


MINIMUM  REQUIREMENTS  FOR 
MEANINGFUL  FIGHTER  APPLICATIONS 


Figure  4  VIA  Specification  Requirements 
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System  Design 


finally  selected  for  the  development  end  flight  teat 
effort,  (1)  Leer  Siegler,  Inc.  (LSI),  whose  voice  equip¬ 
ment  was  flown  on  the  AFTI/F-18  during  the  Phase  I 
Flight  Test  Program,  and.  (2)  Texas  Instruments  (TI)  (see 
Figure  S). 


Figure  S  Location  of  VIA  Hardware  on  the  AFTI/F-18 


In  order  for  the  voice  hardware  to  interface 
effectively  with  all  the  other  subsystems  on  the  aircraft, 
it  had  to  become  as  much  a  subsystem  as  other  avionics 
equipment  (See  Figure  7).  The  voice  system  was  not 
intended  to  be  an  appendage,  dependent  on  one  subsystem 
for  its  interface,  as  happened  during  the  Phase  I  Plight 
Test  Program.  It  will  be  able  to  receive  instructions  and 
data  from  other  subsystems,  and  be  able  to  respond 
according  to  the  design  requirements  outlined  for  the 
Voice  Interactive  Set  (VIS). 


LSI  is  providing  the  same  form  factor  hardware  used 
during  Phase  I  with  additional  capabilities.  They  will  be 
adding  (1)  speech  synthesis  to  meet  the  interactive 
requirement,  and  (2)  connected  speech  capability,  the 
beginning  of  a  new  approach  and  long-desired  method  of 
recognition  for  our  pilots. 

TI  is  offering  a  new  hardware  approach.  They 
essentially  condensed  the  speech  technology,  recognition, 
synthesis,  and  I/O  modules  into  hardware  the  size  of  a  car 
radio.  This  was  very  desirable  for  AFTI/F-18  since  the 
aircraft  can  now  fly  with  a  Tactical  Air  Navigation 
(TACAN).  The  LSI  hardware  is  missionized  with  the 
TACAN  located  in  the  dorsal  fairing!  therefore,  pre¬ 
venting  the  TACAN  from  being  used.  The  block  diagram 
in  Figure  6  briefly  illustrates  the  hardware  modules  or 
functions  that  are  located  in  the  vendor's  equipment. 


Figure  8  Block  Diagram  of  the  Voice  interactive 

System 
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Figure  7  VIA  Architecture  Supports  Functional 
Partitioning  and  Design  Requirements 


The  applications  to  be  tested  with  voice  were 
selected  from  those  tasks  the  pilots  felt  would  best 
reduce  pilot  workload  if  voice  interaction  was  used.  A 
wide  variety  of  tasks  were  chosen  for  evaluation.  With 
voice  commands,  the  pilot  will  be  able  to  perform 
multiple  data  entry  functions  accomplished  by  the  F-16 
Data  Entry/Cockpit  Interface  Set  (DE/CIS),  make  page 
selection  and  manipulation  of  nearly  all  Multifunction 
Display  (MFD)  pages,  and  have  the  ability  of  simul¬ 
taneously  selecting  a  particular  weapon  or  gun,  while  at 
the  same  time  automatically  selecting  the  proper  mission 
phase  for  his  weapon  choice. 

In  addition  to  emulating  button  depressions  in  the 
cockpit  by  way  of  voice  commands,  the  VIS  is  able  to  set 
and  monitor  various  aircraft  parameters,  and  then  inform 
the  pilot  that  the  conditions  have  been  met.  If  a  failure 
occurs  on  the  aircraft,  whether  it  is  a  warning  or  a 
caution,  the  appropriate  subsystem  responsible  for 
monitoring  that  condition  will  instruct  the  VIS  to 
synthesize  the  message  that  best  describes  the  condition. 

An  option  also  exists  to  train  recognition  templates. 
This  allows  the  pilot  to  perform  minimal  in-flight  training 
of  speech  templates  to  improve  recognition.  The  pilot 
also  has  the  capability  of  choosing  which  types  of 
synthesis  phrases  he  will  receive  during  a  mission.  During 
a  heavy-workload  environment,  the  pilot  has  the  option  of 
placing  the  synthesis  into  a  combat  mode  that  will  only 
synthesize  certain  messages,  or  he  can  also  turn  the 
synthesis  off  all  together. 


Figure  I  VIA  Nodal  Structure 


VIA  Mechanization 


Figure  8  illustrates  the  means  by  which  each  voice 
task  is  activated.  This  figure  shows  how  the  vocabulary 
waa  broken  up  into  nodes,  or  vocabulary  sets.  At  the 
beginning  of  the  Phase  II  Program,  the  vendors  felt  that 
nodes  larger  than  approximately  23  words  would  have 
significant  impact  on  recognition  accuracy  and  response 
time.  Therefore,  an  effort  was  made  to  ensure  that  no 
node  would  exceed  this  amount,  and  that  additional  nodes 
would  be  added  to  help  keep  the  vocabularies  small.  This 
would,  therefore,  increase  the  accuracy  and  integrity  of 
each  selected  recognition  task. 


in  order  to  inform  the  VIS  that  speech  (spoken 
through  the  pilot's  oxygen  mask)  should  be  processed  and 
compared  to  the  VIA  vocabulary,  a  push-to-talk  or  Voice 
Enable  (V/E)  switch  was  added  to  the  cockpit.  It  is 
located  on  the  control  stick  for  easy  access  and  control. 
This  switch  has  an  additional  function  beyond  informing 
the  VIS  to  perform  recognition;  it  can  also  be  used  to 
quiet  low-priority  synthesis  messages,  which  is  useful  if 
the  pilot  is  too  busy  to  listen  at  the  moment.  To  recall 
the  last  message,  whether  it  was  completed  or  quieted  by 
the  V/E,  the  pilot  has  the  option  of  saying  "REPEAT". 
This  is  useful  if  the  pilot  failed  to  hear  the  last  message 
for  some  reason. 


The  node  chart  is  broken  up  according  to  its 
function  or  the  subsystem  affected  by  it.  The  first  node, 
or  Master  Node,  contains  the  identifier  word  that 
identifies  the  task  availability  within  the  affected 
subsystem.  Since  the  requirement  was  previously 
established  that  each  node  could  be  no  larger  than  2$ 
words  and  that  each  voice  task  must  be  familiar  enough 
that  the  pilot  will  not  need  to  learn  any  major  new 
procedures,  each  task  will  use  identifier  words  to  start 
them.  For  example,  to  select  a  frequency  on  the  DE/CIS, 
the  manual  task  requires  the  pilot  to  depress  the 
COMM_l  button  prior  to  the  digits  for  the  frequency. 
The  same  is  true  for  voice.  The  pilot  will  say  "COMM1" 
to  initiate  the  frequency  selection.  This  process  could  be 
eliminated  in  future  applications  if  the  vocabulary  was 
allowed  to  increase  and  still  not  cause  any  adverse  effect 
to  the  recognition. 


Pllot/Vehlcle  Interface  (PVI)  Considerations 


The  VIA  design  took  into  consideration  some  PVI 
issues  to  facilitate  the  pilot's  intent.  For  example,  the 
voice  initiated  Multifunction  Display  Set  (MFDS)  page 
selection  would  cause  the  page  to  appear  where  the  pilot 
most  probably  would  require  it  for  the  present  mission 
configuration. 


A  node  timeout  capability  was  added  to  each  node 
because  the  possibility  exists  that  certain  voice  tasks 
could  be  interrupted  by  manual  tasks  of  a  higher  priority, 
or  the  pilot  may  choose  to  release  the  V/E  to  permit  him 
to  gather  his  thoughts.  The  timeouts  are  programmable 
and  can  be  set  from  zero  (0)  seconds  to  infinity. 


The  annunciation  of  synthesis  messages  was  also  a 
concern.  The  VIS  should  know  when  messages  should  be 
synthesized,  and  in  what  order,  in  the  AFTl/F-18  design, 
each  message  is  assigned  a  priority  and  it  is  the  responsi¬ 
bility  of  the  VIS  to  determine  which  message  should  be 
synthesized  and  at  what  volume.  Warning  and  caution 
messages  are  assigned  a  different  volume  to  anticipate 
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instances  where  the  volume  control  knob  could  poeeibly 
be  turned  down.  This  forces  the  volume  to  override  the 
knob  control  end  to  help  identify  the  urgency  of  the 

message. 


Because  there  may  be  words  that  will  not  perform 
during  flight  test  with  the  certain  templates  that  were 
trained  on  the  ground,  a  means  was  provided  to  allow 
minimal  in-flight  training.  This  process  is  strictly  an 
interactive  voice  procedure  and  requires  no  visual  feed¬ 
back  of  the  word  to  be  trained.  To  initiate  this  option, 
the  pilot  informs  the  VIS  of  the  identification  (ID)  code 
for  the  problem  word  (for  words  that  are  digits,  the  10 
code  does  not  contain  the  same  value);  then  the  VIS 
synthesizes  to  the  pilot  which  word  is  to  be  trained. 


There  was  also  concern  that  the  nodes  should  be 
organized  in  such  a  manner  as  to  increase  recognition 
accuracy  and  still  make  sense  to  the  pilot.  This  is  a 
difficult  task  because  of  the  restrictions  in  the  grammar 
and  design.  Some  learning  will  be  required  for  this 
design,  but  as  the  technology  improves,  an  increase  in  the 
size  and  speed  of  the  vocabulary  will  be  realized,  and  the 
ease  of  usage  will  also  improve. 


Flight  Demonstration 


The  true  test  will  be  how  well  the  pilot  is  able  to 
accomplish  his  mission  and  still  say  that  voice 
contributed  to  its  success  (See  Figure  9).  The  AFTI/P-18 
pilots  will  be  required  to  fly  identical  scenarios 
alternating  between  the  use  of  voice  tasks  and  normal 
manual  tasks.  The  data  acquired  during  the  voice  task 
scenarios  will  be  compared  against  the  same  scenarios 
flown  strictly  by  manual  operation.  This  data  will  allow 
subjective  and  objective  evaluations  of  whether  or  not 
the  pilot's  workload  was  reduced,  (n  preparation  to  this 
final  evaluation,  selected  runs  will  be  flown.  Besides 
helping  the  pilot  become  familiar  with  the  use  of  voice, 
environmental  and  template  recognition  data  will  be 
collected  for  future  analysis  and  algorithm  development. 
These  data  points  will  include  (1)  speaking  at  elevated  g*s 
(up  to  7  g*s),  (2)  speaking  loudly,  and  (3)  speaking  while 
looking  over  the  shoulder  and  pulling  a  S-g  maneuver. 
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Figure  0  VIA  Demonstration  Testing 
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CONCLUSION 


The  AFTI/F-16  Voice  Interactive  Avionics  program 
has  developed  as  a  natural  extension  of  previous  studies 
and  evaluations.  At  the  completion  of  the  AFTI/F-18 
program,  sufficient  data  will  be  available  to  (1) 
determine  how  voice  technology  can  effectively  decrease 
pilot  workload,  and  (2)  determine  the  utility  of  voice 
technology  in  fighter  environments  (See  Figure  10). 
Additionally,  data  gathered  during  the  flight  demon¬ 
stration  will  be  useful  in  (1)  identifying  characteristics 
that  affect  voice  patterns,  thereby  enhancing  future 
algorithm  development  to  increase  recognition  accuracy; 
and  (2)  determining  production  requirements  for  future 
programs,  such  as,  internal  architecture,  memory 
requirements,  and  throughput. 


•  HIGH  WORKLOAD  APPLICATIONS 


•  SUBSYSTEM  PARTITIONING 


•  IMPROVED  VOICE  RECOGNITION 


•  DETERMINE  PRODUCTION  HARDWARE  REQUIREMENTS 


•*  Internal  Architecture 
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Figure  10  VIA  Objectives  Remain  Unchanged 
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ABSTRACT 

The  AFTI/F-18  program  is  an  advanced  fighter 
technology  integration  program  jointly  sponsored  by  the 
Air  Force,  NASA,  Navy  and  Army.  It  is  conducted  by  the 
Fort  Worth  Division  of  General  Dynamics  and  is  aimed  at 
the  development  and  integration  of  emerging 
technologies  to  improve  the  mission  effectiveness  of 
tomorrow's  fighter  aircraft.  The  AFTI/F-18  aircraft  Is 
currently  undergoing  flight  testing  at  the  NASA  Dryden 
Facility  at  Edwards  Air  Force  Base.  This  paper  is  a 
presentation  of  the  Digital  Terrain  Management  and 
Display  System  (DTMDS),  more  commonly  referred  to  as 
the  Digital  Map  Generator  (DMG),  its  main 
subcomponent.  The  functions  of  this  system  and  its 
applications  are  the  primary  topics. 


INTRODUCTION 

The  AFTI/F-18  implementation  of  the  Digital  Map 
Generator  (DMG)  was  made  possible  through  the  funding 
of  separate  tasks  by  General  Dynamics,  the  U.S.  Air 
Force,  and  the  U.S.  Army.  It  should  be  noted  that  the 
DMG  was  designed  with  consideration  given  to  Array 
applications,  and,  as  such,  those  applicable  DMG 
functions  are  not  discussed  in  this  paper.  This  effort  was 
begun  in  July  1983  by  Harris  Corp.,  and  has  resulted  in 
the  successful,  flight  test  of  the  system  in  the  first 
quarter  of  1986.  Applications  of  the  system  have  grown 
from  those  of  only  a  digitally-generated  map  to  the 
exploitation  of  the  underlying  digital,  elevation  data  in 
advanced,  sensor-fusion  applications. 

The  DMG  not  only  has  the  capability  of  generating  a 
full-color  map  at  various  scales,  but  it  possesses  a 
graphics  capability  for  both  symbology  and  synthetic 
electronic  instrumentation.  One  of  the  uses  of  the  digital 
data  involves  terrain  correlation  computation  for 
accurate  and  autonomous  navigation.  The  DMG  concept 
allows  the  pilot  a  quick  and  effective  means  of  flying  a 
preplanned  mission  with  an  identical  data  base.  These 
mission  data  can  be  changed  en  route  or  updated  via  an 
air-to-ground  link.  Situational  awareness  and  pilot 
confidence  are  greatly  enhanced  by  cognizance  of  exactly 
where  he  is,  where  he  may  need  to  go,  and  what  lies 
between  him  and  his  destination. 

Advanced  applications  of  the  DMG  are  numerous 
and  continue  to  expand.  Tactical  Situation  Displays 
(T3D)  and  new  electronic  instrument  displays,  as  well  as 
other  graphics,  are  possible  through  the  use  of  existing, 
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symbol-generator  hardware.  The  DMG  has  also  been 
designed  for  additional  growth  in  functional  capability. 
The  terrain  information  may  have  future  applications  of 
enhanced  ground-collision  avoidance,  guidance, 
intervisibility,  perspective,  and  improved  mission 
planning. 


SYSTEM  DESCRIPTION 

The  DMG  is  part  of  the  larger  DTMDS  system  as 
illustrated  in  Figure  1.  The  Harris  DMG,  as  the  focal 
point  of  the  system,  performs  the  processing  and  video 
generation  associated  with  the  digital  data.  The  digital 
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Figure  1  DTMDS  System  Diagram 

data  are  stored  externally  of  the  DMG  on  two  Raymond 
Engineering  Magnetic  Tape  Loaders  (MTLs).  Each  of 
these  storage  devices  is  composed  of  an  Electronics  Units 
(EU)  and  a  Tape  Transport  Cartridge  (TTC).  Figure  2 
shows  the  DMG  and  one  TTC  with  the  electronics  unit 
beneath.  The  pilot  inputs  are  entered  via  the  bezel 
switches  on  the  Bendix  Color  Multifunction  Display 
(CMFD),  interpreted  by  the  Bendix  Color  Programmable 
Display  Generator  (CPDG),  and  communicated  to  the 
DMG  on  the  1553B  Multiplex  Bus  (MUX  Bus).  The  raster 
video,  which  is  generated  by  the  DMG,  has  stroke  data 
overlaid  upon  it  by  the  Bendix  CPDG.  This  stroke  data 


•HUirMHVMIUf 

•aanwcun 

•  j  count 

•  WAIMKT  rnmiH)  HAMTI 

•  to  nmuw  nuoura 

•  aTM  rintui  cmmiathm 

•  mhiont  Mnn  r»  rtn 
•MMIT  (Ml  UKMUI 
«  0<lt  DATA  Ut I 

•  caio«M«Mic< 

•  cotonrirr 

•  AAtl  AJUACtVtAAM 

•  HUNT  ha»  oar  *» 

•  ota  unto  omom 


•  i«  AMT  MUViMI  tivmoti  IM 

•  CUtMOTlY  M  AlltMT  nn 

A  AIMT  AIKNT  It  ACMHAOT  IM 


••MlTrnMCOMO 

•  LICMT  OOTT  CTCll  01 
CUMUTMOCUOOOS 

•  GAOWTM  ADA  AUTVW  AMCUMM 
•MON  DATA  CMMUM*  AAT( 


•IVMOL  OIMOATOO 


Figure  2  The  AFTI/F-H  DTMD8  System 

consists  principally  of  switch  labels  and  not  map  feature 
data.  The  hybrid  video  is  then  displayed  on  the  Bendix 
CMFD. 


DESIGN  OBJECTIVES 

The  design  objectives  of  the  DMG  emerged  from  a 
need  for  highspeed,  low-altitude,  all-weather,  automatic 
flight  and  a  need  for  tactical  situation  awareness.  These 
parameters,  when  optimized,  provide  the  pilot  with  the 
basis  for  maximum  survivability.  However,  without 
sensor  input  this  becomes  an  increasingly-high-workload 
task  and  at  some  point  saturates  the  pilot's  ability  to 
respond  to  various  mission  parameters  that  need  to  be 
addressed  for  maximum  survivability.  The  digital  map 
goal  was  to  reduce  this  task  by  eliminating  the  need  for 
paper  maps  as  a  primary  source  of  navigation,  and  to 
provide  the  pilot  with  a  situational  awareness  that  was 
not  previously  possible.  Also,  a  digital  data  base  was  to 
allow  many  future,  overall,  aircraft  improvements  that 
were  not  previously  possible  in  the  sensor  fusion  arena.  A 
secondary,  but  necessary,  design  objective  resulted  from 
placement  of  the  CMFD  in  the  center  pedestal.  This 
location  of  the  CMFD  displaced  the  flight-critical  ADI 
and  HSI  flight  instruments.  Therefore,  it  became 
necessary  to  design  synthetic,  electronic,  flight 
instruments  to  replace  the  ADI  and  HSI. 


HUMAN  FACTORS 

In  this  digital-data-management  system,  digital 
data  displayed  to  the  pilot  are  presented  with  real-time 
translation  and  rotation  synchronized  to  aircraft  motion. 
Additional  modes  provide  stationary,  look-ahead  views. 
The  ability  to  electronically  synthesize  displays  allows 
for  constantly-changing  information  to  be  updated  in 
real-time.  For  example,  colors  can  be  allocated  to 
specific  terrain  heights  above  and/or  below  aircraft 
altitude.  Therefore,  as  the  aircraft  moves  vertically. 


these  "highlighted"  regions  contract  and  expand  depicting 
potentially  hazardous  areas.  Displays  of  electronic, 
primary,  flight  instruments  and  flight  control  system 
faults  are  also  available.  It  should  be  noted,  however, 
that  display  of  terrain  (the  main  format)  offers  little 
advantage  over  simple  digitized  paper  maps.  The 
capability  of  extracting  and  manipulating  elevation  data 
is  the  main  advantage  of  the  digital  map. 

The  synergism  between  the  available  terrain  data 
onboard  the  aircraft  and  the  ability  to  achieve  improved 
navigational  accuracies  is  apparent.  Sensor  data,  which 
are  obtained  as  the  aircraft  Hies,  can  be  correlated  to 
stored  terrain  data  and  automatically  linked  to  update 
the  inertial  navigation  system  to  minimize  pilot/system 
errors.  The  Sandia  Inertial  Terrain-Aided  Navigation 
(SITAN)  algorithm  has  already  achieved  improved 
potential  accuracies  of  less  than  100  meters.  Because 
the  pilot  obtains  some  78%  of  his  information  from  the 
visual  sense,  it  is  important  to  maximize  the 
transference  of  these  data  through  properly  designed 
displays.  Some  of  the  experiments  that  are  scheduled  to 
be  performed  to  support  the  AFT1/F-16  map 
development,  and  to  support  the  transition  of  the  displays 
from  monochromatic  to  emissive  chromatic  are  listed  in 
Table  1. 


Table  1  HUMAN  FACTORS  EXPERIMENTS  FOR  THE 
DIGITAL  MAP  SYSTEM 


(MWtMM 

Objective 

1.  High  Resolution  CRTs 

1.  Ascertain  acceptable  saturation  levels 

2.  Seal*/ Feature 

2.  Determine  types  and  number* 

Prioritization 

of  color  features  required  for 

appropriate  map  scales 

3.  Sise/Shape/Color 

3.  Determine  types  and  numbers 

Codinf 

of  color  features  required  for 

appropriate  map  scales 

4.  Color  Coding  Sett e me 

4.  evaluate  number  and  cftrematic 

coordinates  of  usable  colors 

3.  Hlfh/Low  Ambient  Light 

S.  Optimise  automatic  display  brightness 

controls 

4.  Chromoet  creeps  is  Uses 

4.  Ascertain  usee  of  chromostoroopsla 

7.  Accommodative  Efforts 

7.  Determine  optimum  saturation 

to  Multi-Color  Displays 

as  a  Function  of  Color 

Intensity 

PHYSICAL  DESCRIPTION 

The  DTMDS  is  physically  configured  in 
preproduction  form  and  incorporates  state-of-the-art 
packaging  as  well  as  functional  technologies.  For  the 
DMG,  a  low-volume,  packaging  technique  is  utilized 
which  mechanically  integrates  the  electronics  and 
housing  into  a  solid  structure,  thus  affording  maximum 
protection  to  the  electronics.  The  DMG  is  shock  mounted 
to  enable  it  to  meet  the  gunfiring  vibration  environment, 
and  aircraft  cooling  air  is  required  to  enable  it  to  operate 
through  the  temperature  environment.  The  MTL  is  a 
militarized  production  unit.  Model  6425-01,  manufactured 
by  Raymond  Engineering,  Inc. 

The  DMG  consists  of  21  electronic  modules  or  SRAs 
and  a  power  supply  module  housed  in  a  9.04  inches  high  x 
8.5  inches  wide  x  18.25  inches  long  enclosure.  It  has  a 
volume  of  1400  cubic  inches,  weighs  62.87  pounds 
(including  an  isolator  mounting  tray)  and  dissipates  494 
watts  maximum.  The  power  for  the  DTMDS  is  of  two 
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typeei  115- volt,  3-phase,  400-Hz  AC  power  for  the  DMG 
and  21  Vdc  for  discrete*.  In  addition  to  the  21  electronic 
modules  and  power  supply,  the  enclosure  contains  the  I/O 
connectors,  a  motherboard,  and  a  rigid-flex,  printed 
wiring  board  to  interface  the  I/O  connector  with  the 
motherboard. 

The  MTL  is  partitioned  into  three  subassemblies, 
namely  the  electronics  unit,  the  Tape  Transport 
Cartridge  (TTC),  and  the  cradle  and  cable  assembly.  The 
electronics  unit  provides  power,  tape  control,  and 
processing  functions,  (t  interfaces  with  the  DMG  by 
means  of  the  MTL  interface  unit  in  the  DMG.  The  TTC  is 
a  removable  unit  containing  the  magnetic  storage  media, 
tap*  drive  mechanisms,  and  read/write  components.  The 
TTC  plugs  into  the  cradle  and  cable  assembly  which  is  in 
turn  connected  to  the  electronics  unit.  The  power  for 
each  MTL  is  28  VDC  and  is  consumed  at  the  rate  of  28 
watts.  A  vibration  mounting  tray  was  designed  for  the 
TTC  in  order  to  withstand  both  aircraft  and  gunfire 
vibration.  The  electronics  unit  weight,  excluding  the 
installation  specific  cable,  is  3.0  pounds  in  a  volume  of  78 
cubic  inches.  The  TTC  weight  is  1.7  pounds  in  a  volume 
of  23  cubic  inches.  Cooling  provided  for  the  DTMDS 
system  is  provided  in  two  forms.  The  DMG  is  forced-sir 
cooled  and  is  designed  around  the  AFTI  constraints  shown 
in  Figure  3.  The  MTLs  require  only  convection  cooling. 


Figure  3  LRU  Maximum  Required  Cooling  Air  Flow  Data 


DMG  ARCHITECTURE 

As  described  earlier,  the  DTMDS  comprises  the 
DMG  unit  and  either  l  or  2  MTL  units.  While  the  MTL  is 
simply  the  Raymond  Model  6425  Tape  Unit,  with  its  plug¬ 
in  tape  transport  cartridge,  the  DMG  contains  several 
complex  subsystems.  The  major  subsystems  thst 
constitute  the  DMG  are  the  Global  Subsystem,  the  Digital 
Map  Generator  (DMG)  Subsystem,  the  Symbol  Generator 
Subsystem,  the  MTL  Control  Subsystem,  and  the  SITAN 
Processor.  The  following  will  provide  an  overview 
description  of  these  major  subsystems. 

Global  Subeystem  Functional  Description 

The  DTMDS  is  an  organization  of  embedded 
subsystems  operating  independently  and  in  parallel,  yet 


communicating  among  on*  another  and  with  external 
systems,  by  means  of  a  shared  global  bus.  There  are  five 
subsystem  elements  that  communicate  with  on*  another 
on  the  global  bus,  as  shown  in  Figure  4.  Communication 
outside  of  the  DTMDS  is  provided  by  the  Bus  interface 
Unit  (BIU).  The  primary  function  of  the  DTMDS  is 
provided  by  the  Digital  Map  Generator  (DMG)  function, 
which  interfaces  rectly  with  the  global  bus.  The 
interface  to  the  .wo  MTLs  is  also  structured  as  a 
subsystem  and  is  shown  in  the  figure  as  the  "tap* 
controller”.  The  other  two  subsystems  are  the  symbol 
generator  and  the  auxiliary/Sandia  Inertial  Terrain-Aided 
Navigation  (SITAN)  subsystems.  While  all  of  the  above 
subsystems  are  bus  masters  (capable  of  arbitrating  for 
the  bus  and  controlling  access  to  the  bus  once  given 
control  by  the  arbitrator),  the  shared  RAM  functions  as  a 
bus  slave  (a  passive  device  which  can  send  and  receive 
data  only  when  commanded  by  a  bus  master). 


ram 
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Figure  4  DMG  Global  Bus  Configuration 
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The  global  bus  is  organized  as  a  word-wide  (16  bit) 
interconnect  system  operating  at  a  functional  one- 
megahertz  rate  (16  megabits  per  second).  Access  to  the 
global  bus  is  on  a  priority  basis,  with  the  BIU  having  the 
highest  priority.  Communication  among  the  subsystem 
elements,  including  the  BIU,  is  through  the  global 
memory  (shared  RAM).  The  "mailbox"  concept,  which  is 
used  in  global  memory  utilization,  alleviates  many  of  the 
synchronization  problems  inherent  in  multiprocessor 
systems.  For  example,  data  from  processor  A  destined 
for  processor  B  are  entered  in  the  appropriate  "mailbox" 
in  global  memory.  At  any  time  later,  processor  B  can 
retrieve  the  data  from  the  "mailbox".  This  concept  is 
especially  efficient,  since  precise  synchronization  among 
the  processors  is  not  necessary  and  processor 
synchronization  to  the  BIU  frame  iteration  rate  is  not 
necessary. 

Bus  Interface  Unit  (BIU) 

The  BIU  provides  access  to  the  shared  RAM  for  an 
external  user  via  a  redundant  M1L-STD-1553B  data  bus. 
Transmit  and  receive  command  messages  via  the  1553B 
bus  are  mapped  to  memory  buffers  on  the  shared  RAM  by 
direct  memory  access  over  the  global  bus. 


Teat  Port 

The  tMt  port  provides  VAX  DE11W  to  global  but 
interface  capability  by  nnn  o f  the  interface  Adaptor 
Unit  (IAU),  which  la  a  module  asternal  to  the  0TMD8 
flifht  hardware  for  use  only  oo  the  (round.  The  1AU 
supports  block  transfers  of  data  up  to  4K  words. 
Commands,  data,  and  test  programs  may  be  uploaded  or 
downloaded  through  the  (AU.  The  (AU  can  functionally 
replace  the  19S3B  Interface. 

Digital  Man  Generator  (DMG) 

The  DMQ  controller  is  the  processor  primarily 
responsible  for  DMG  operation.  In  addition,  the  DMQ 
controller  manages  the  on-line,  digital  map  data  base, 
formats  and  manipulates  those  data,  provides  them  on 
request  to  other  (sub)  systems/users,  and  is  the 
controlling  function  for  real-time  video  presentation  in 
the  cockpit. 


3.  Transfer  from  internal  DMO  memory  to  a  DMG 
mic  processor  as  well  as  the  reverse. 

DMG  Subsystem  Functional  Description 

The  DMG  subsystem  is  responsible  for 
reconstructing  the  compressed,  digital  data  in  the 
Intermediate  Memory  (IM)  and  using  the  reconstructed 
data  to  generate  the  various  video  display  modes.  The 
DMG  subsystem  produces  both  color  and  monochrome 
video  outputs  in  RS-170  format.  The  video  outputs  will 
display  the  topographic  map  generated  by  the  DMG 
and/or  alphanumeric*/ graphics  from  the  symbol  generator 
subsystem.  The  topographic  display  portrays  both  terrain 
elevation  and  cultural  features  and  accommodates  real¬ 
time  rotation  and  translation  of  the  display.  The  DMG 
subsystem  also  provides  terrain  elevation  and  cultural 
feature  data  for  use  by  other  subsystems. 

Symbol  Generator  Subsystem  Functional  Description 


Tens  Controller 

The  tape  controller  provides  the  necessary  interface 
between  the  MTLs  and  the  DMG.  The  tape  controller's 
function  includes  the  data  and  data  rate  buffering 
necessary  to  support  MTL  timing.  This  is  an  independent 
operation  of  the  DMG.  The  tape  controller 
accommodates  data  both  to  and  from  the  MTLs.  When 
data  are  being  transferred  to  the  MTLs,  the  tape 
controller  arranges  and  transfers  the  data  consistent  with 
an  established  MTL  data  format. 

Symbol  Generator 

The  symbol  generator  function  provides  the  map 
overlay  graphics  and  any  necessary  alphanumeric* 
associated  with  the  overlay  symbology.  The  symbol 
generator  is  a  subsystem  by  itself,  it  can  generate  full¬ 
screen  graphics  independent  of  the  map  display  in  the 
form  of  an  electronic  flight  instrument.  In  the  map 
display  modes,  the  symbol  generator  output  is  registered 
geographically  with  the  DMG  output,  ensuring  ease  of 
recognition  and  comprehension  by  the  pilot. 

AwxUitTY  (SIT AN)  Pro<?W<?r 

The  auxiliary  processor  performs  navigation 
correlation  computations  utilizing  the  SITAN  algorithm. 
Periodic  navigation  updates  are  provided  by  the  SITAN 
algorithm  based  on  the  aircraft  altitude  measurement 
data  input  over  the  1553B  data  bus. 

aacssLSAv 

The  sha  \M  is  a  global  16k  word  memory  which 
provides  stora,  >r  inter-processor  communications  and 
external  DTMD.  ommunications. 


The  symbol  generator  subsystem  provides  high  speed 
MTLs  from  its  internal  storage,  and  from  the  1SS3B  data 
bus  for  these  displays.  Data  received  over  the  bus  are 
new  data,  and  may  include  flight  plans,  targets,  threats, 
and  friendly  symbols.  The  symbol  generator  ensures  that 
text  is  presented  in  a  screen-up  orientation,  no  matter 
what  the  orientation  of  the  map  may  be. 

Graphics  are  registered  with  the  map  data  even 
during  translation  and  rotation.  Symbols  are  positioned 
with  a  resolution  of  1  pixel  over  a  screen  spatial 
resolution  of  480  x  480  pixels.  Symbols  intersecting  the 
edge  of  the  display  screen  scroll  onto  the  screen  smoothly 
in  a  pixel-by-pixel  fashion. 

The  display  is  refreshed  at  the  rate  of  60  Hz  and 
updated  at  the  following  rates: 


Symbol  Usage  Sate 

Synthetic  Instruments  30  Hz 

Map  Point  Features  15  Hz 

Fixed  Position  Symbology  5  Hz 


There  are  two  independent  channels  of  symbology 
maintained  by  the  symbol  generator.  Channel  2  data 
consists  simply  of  a  two-level,  monochrome  symbology, 
while  Channel  1  provides  symbology  for  the  DMG  RS-170 
RGB  color  video  display.  Channel  1  is  capable  of 
displaying  seven  colors  simultaneously  from  a  possible 
range  of  16,777,216  colors.  Color  selection  is  loaded 
from  tape  into  the  DMG  at  initialization.  Seven  colors 
have  been  specified  to  maximize  the  color  contrast  of 
points  and  lines  against  area  backgrounds.  In  addition  to 
these  seven  colors,  an  eighth  color,  transparent,  is 
provided.  The  transparent  color  allows  terrain  data  to 
show  through  the  open  parts  of  the  symbols. 


Tape  Control  Subsystem  Functional  Description 


The  Tape  Control  Subsystem  performs  several  data 
transfer  functions: 


1. 

2. 


Copy  from  tape  to  tape, 


Transfer  from  tape  to  internal  DMG  memory  as 

well  as  the  reverse,  and 


The  specific  types  of  symbols  available  can  be 
categorized  into  alphanumerics,  circles,  lines,  and  point 
features.  Alphanumerics,  which  include  the  standard 
ASCII  characters,  are  available  in  2  font  sizes  -  10  x  13 
pixels  (font  1)  and  14  x  18  pixels  (font  2)  -  with  a  line 
width  of  2  pixels.  A  total  of  52  sizes  of  circles  can  be 
generated  with  a  range  radius  of  7  to  1024  pixels.  Lines 
may  be  displayed  with  selectable  length,  slope,  and  end 
points.  Point  features  are  specified  as  having  a 
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particular  geographic  location,  and  each  point  feature 
may  have  a  four-character  label  (font  l)  aaaociated  with 
it-  Thera  are  two  type*  of  point  features:  (1)  global 
interest  points  and  (2)  local  geographic  points. 
Characteristics  of  the  two  types  of  point  features  are 
summarised  in  Table  2. 


Table  2  DTMDS  POINT  FEATURES 
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Other  capabilities  of  the  symbol  generator  include 
the  following!  (1)  symbol  flashing  (2.S  Hz,  50%  duty 
cycle)!  (2)  rotating  of  symbols;  (3)  an  occlusion  zone 
(which  prevents  background  video  from  showing  through) 
around  a  symbol  of  selectable  color  (any  of  the  seven 
symbol  colors)!  (4)  area  fill,  which  allows  a  large  area  of 
the  screen  to  be  drawn  in  a  specified  color,  (5)  declutter, 
which  provides  a  means  of  removing  symbology  from  the 
screen  in  order  to  prevent  overcrowding  of  the  display; 
and  (8)  an  electronic  flight  instrument  display  mode, 
which  is  a  symbology-only  mode  (the  map  display  is 
deselected). 

SIT  AN  Operating  Description 

Sandia  Inertial  Terrair.-Aided  Navigation  (SITAN)  is 
an  extended  Kalman  filter  navigation  algorithm  which 
utilizes  outputs  from  the  radar  altimeter  (which  measures 
ground  clearance),  the  Inertial  Navigation  System  (INS), 
and  the  Digital  Terrain  Elevation  Database  (DTED)  to 
produce  corrections  to  the  INS  indicated  position  and 
velocity.  Typical  unaided  inertial  navigation  systems 
develop  horizontal  position  errors  on  the  order  of  several 
miles  per  hour,  whereas  SITAN  can  reduce  these  errors  to 
the  order  of  100  meters  or  less.  This  navigational 
accuracy  improvement  is  a  result  of  making  periodic 
adjustments  to  the  INS  computations  by  comparing 
ground  clearance  measurements  with  a  predicted  ground 
clearance,  as  determined  from  the  DTED.  These 
adjustments  typically  occur  every  100  meters  of  distance 
traveled.  Figure  5  shows  the  basic  SITAN  configuration. 
This  configuration  is  valid  for  aircraft  altitudes  below 
300  meters  above  ground  level  (AGL).  When  there  i»  a 
large  error  in  the  initial  aircraft  position,  a  single  SITAN 
filter  may  take  a  long  time  to  converge  to  the  true 
position,  or  it  may  possibly  never  converge.  Thus,  when  a 
large  initial  uncertainty  is  expected,  several  SITAN 
filters  spaced  approximately  500  meters  apart  are  run  in 
parallel,  each  estimating  the  aircraft  position  within  a 
smaller  uncertainty  region.  When  one  of  these  parallel 
filters  can  be  reliably  chosen  as  having  converged  to  the 
true  aircraft  position,  a  single  SITAN  filter  can  then  be 
Initialised  at  this  position. 


Figure  5  SITAN  Functional  Cooftguraton 

Through  this  procedure  SITAN  produces  a  corrected 
INS  state  which  is  used  to  update  the  aircraft's  position 
on  the  map.  This  output  could  be  coupled  to  update  the 
INS,  but  is  not  accomplished  in  this  implementation. 

DTMDfl  OPERATION 
Detailed  Operating  Mode  Descriptions 

The  different  mode  commands  that  can  be 
processed  by  the  DTMDS  are  described  in  this  section, 
included  in  the  mode  commands  are  general  on/off 
controls  (On-line/Off-llne,  Map  On/Off,  Center/ 
Decenter,  SPI,  BIT/Self-test,  and  SITAN  Mode  Select), 
DMG  feature  selections  (shades  of  gray,  sun-angle 
shading,  terrain  above  a  set  altitude,  contour  lines, 
cultural  data,  color  assignments,  display  scales,  and  scene 
memory  usage),  and  symbology  selections  (colors,  symbol 
blink,  alphanumerics,  graphics,  point  features,  and  an 
IFD). 

General  On/Off  Controls 

On-ilne/Off-line.  A  single  bit  in  the  initialization 
data  is  used  to  determine  whether  the  DTMDS  is  in  the 
off-line  mode  or  the  on-line  mode.  In  the  off-line  mode 
all  video  displays  are  blanked  except  for  test  patterns 
used  in  BIT.  The  off-line  mode  is  used  for  all  block 
transfers  through  either  the  1553B  bus  or  the  test  port. 
The  on-line  mode  is  the  normal  operational  mode  during 
which  video  outputs  are  maintained.  This  mode  is 
commanded  by  means  of  the  1553B  bus. 

Map  On/Off.  A  symbology-only- mode  can  be 
displayed  by  a  1553B  bus  command.  In  this  mode  a 
programmable  background  color  is  displayed  everywhere 
the  symbol  generator  is  inactive. 

Center/Decenter.  The  DTMDS  display  can  be 
centered  or  decentered  (77%  down  from  the  top  of  the 
display)  at  the  specified  navigation  update  position.  An 
indication  of  the  aircraft  position  on  the  display 
(centered  or  decentered)  is  provided  by  an  aircraft 
symbol.  The  decenter  position  provides  more  look-ahead 
display  area. 

System  Point  of  Interest  (SPI).  The  SPI  mode,  when 
selected,  presents  a  map  display  image  so  that  the 
latitude/longitude  for  the  system  point  of  interest  is 
depicted  in  the  center  of  the  color  display.  The  map 
image  is  displayed  in  the  North  Up  orientation  when  the 
SPI  mode  is  selected.  The  aircraft  symbol,  although  not 
centered  in  the  SPI  mode,  will  appear,  if  the  aircraft 
position  is  within  the  area  displayed.  It  will  appear  in  its 
true  position  and  orientation. 


96 


BtT/Salf-Tast.  Salf-test  it  continually  perform  ad  in 
til*  on-llna  mod*.  Built-in  teat  (BIT)  oparataa  only  whan 
commanded.  BIT  can  operate  only  when  the  DTMD3  is  in 
the  off-line  mode,  and  it  is  used  primarily  in  the  aircraft 
as  a  GO,  NO-GO  indication. 

SITAN/Mode  Select.  The  S1TAN  module  consists  of 
three  major  partm  acquisition  mode,  track  mode,  and  the 
mode  control  iofic.  The  mode  control  lofic  receives 
control  from  the  executive  at  a  3-Hz  rate.  The  actual 
flow  consists  of  a  forced  mode  and  an  automatic  mode. 
The  automatic  mode  is  SITAN’s  normal  state  where  flow 
is  passed  from  acquisition  to  track  and  from  track  to 
acquisition  based  on  the  internal  mode  control  lofic. 
Higher-level  logic  (or  the  pilot)  can  force  SITAN  into  one 
of  three  states:  off,  acquisition,  or  track.  If  one  of  these 
three  states  has  not  been  explicitly  specified,  SITAN 
remains  in  the  automatic  mode.  Once  turned  off,  SITAN 
remains  off  until  either  forced  into  acquisition  or  track 
mode,  or  explicitly  returned  to  the  automatic  mode  by 
the  pilot.  On  power-up  or  full  reset,  if  no  explicit  mode 
is  specified,  SITAN  will  start  in  the  automatic  acquisition 
mode. 

General  DTMDS  Feature  Selections 

Display  of  Elevation  and  Cultural  Data.  The 
Defense  Mapping  Agency  (DMA)  data  are  composed  of 
two  distinct  types  of  data:  elevation  data  and  cultural  (or 
feature)  data.  These  two  types  of  data  are  mixed 
together  digitally  within  the  DMG  to  provide  a  real-time 
color  moving  map  display.  Elevation  data  can  be 
displayed  in  one  of  three  formats:  elevation  shading 
(shades  of  gray),  sun-angle  shading,  or  terrain  above  a  set 
altitude.  The  display  format  for  elevation  is  user 
selectable  over  the  1SS3B  bus. 

Elevation  Shades  of  Gray,  in  the  elevation  shades 
of  gray  format,  the  intensity  of  each  pixel  is  a  function 
of  the  absolute  elevation  of  the  terrain  being 
represented.  The  Intensities  are  grouped  into  eight 
distinctive  bands.  The  DTMDS  is  capable  of  updating  the 
elevation  shades  of  gray  field  of  each  scene  memory,  by 
means  of  the  1SS3B  bus  using  the  folio  ling  parameters: 

1.  Maximum  Altitude  -  the  specific  discrete 
absolute  elevation  above  which  the  maximum 
shade  of  gray  value  is  assigned,  and 

2.  Band  Interval  -  the  interval  at  which  the  shade 
of  gray  changes  (up  to  7  times)  below  the 
maximum  altitude. 

Locations  within  the  memory  are  accessible  by  the 
hardware  and  are  loaded  with  the  maximum  shade 
altitude  and  the  shade  interval  for  the  displayed  scene 
memory.  The  shade  values  for  the  displayed  scene 
memory  are  loaded  into  the  hardware  shade  table.  This  is 
performed  within  two  vertical  retrace  times  (33 
milliseconds)  from  receipt  of  the  command. 

Sun-Angle  Shading.  In  the  sun-angle  shading, 
display  format,  the  intensity  of  each  pixel  on  the  display 
is  a  function  of  the  slope  of  the  terrain  represented  by 
the  pixel  relative  to  an  artificial  sun  angle.  This  gives 
an  artificial,  three-dimensional  appearance  to  the  map. 
The  sun  angle  is  artificially  fixed  at  -45  degrees  with 
respect  to  the  map  orientation  angle  in  order  to  prevent 
commonly  known  display  illusions.  In  the  sun-tngle 


display  format  IS  shade  levels  are  utilized.  The  DMG 
automatically  adjusts  for  the  display  scale  factor;  thus, 
no  external  parameters  are  required  in  this  mode. 

Terrain  Above  a  Set  Altitude.  The  third  display 
format  is  called  terrain  above  a  set  altitude.  This  format 
is  a  modification  to  the  standard  elevation  shading 
format.  The  purpose  of  this  mode  is  to  provide  the  pilot 
with  a  display  particularly  suited  to  terrain-avoidance 
flight.  In  this  mode,  all  areas  of  the  display  representing 
terrain  above  a  set  altitude  are  assigned  a  distinct  color. 
Other  areas  of  the  display  are  assigned  a  mid-shade  of 
the  elevation  shading  format.  The  "set  altitude"  can  be 
fixed  or  dynamically  controlled  by  the  DMG  to 
correspond  to  the  aircraft  altitude  plus  an  externally 
provided  offset.  The  color  chosen  is  read  from  the  tape 
at  initialization. 

Contour  Lines.  In  each  of  the  three  basic  elevation 
formats,  black  contour  lines  can  be  added.  The  contour 
lines  represent  lines  of  constant  elevation  in  the 
displayed  terrain.  The  contour  lines  can  be  selected  or 
deselected  by  external  1S53B  bus  control.  When  selected, 
the  lines  are  generated  at  a  real-time,  60-Hz  rate  so  that 
they  keep  up  with  any  aircraft  translation  or  rotation. 
Two  inputs  are  provided  to  the  DMG  via  the  1S53B  bus  to 
define  a  reference  elevation  for  contour  line  location 
(RC)  and  the  interval  between  subeequent  contour  lines 
(1C).  The  value  of  RC  can  be  poeitlve  or  negative. 
Contour  lines  will  be  assigned  at  the  elevation  equal  to 
RC  and  all  elevation  values  above  and  below  RC  that  are 
Integer  multiples  of  IC.  Without  specific  commands  over 
the  15S3B  bus,  initialization  values  for  the  contour  linea 
will  be  used. 

Cultural  Data.  Feature  colon  are  obtained  from 
DMA  cultural  data  which  are  composed  of  area,  linear, 
and  point  features.  Within  the  DMG,  point-feature  data 
are  processed  with  all  other  symbology  in  the  symbol 
generator  subsystem  and  are  discussed  in  a  later  section. 
Area-feature  end  linear-feature  data  are  read  from  the 
MTL  in  compressed  form  and  are  reconstructed  prior  to 
being  written  into  a  scene  memory.  The  DMG  can 
process  up  to  62  different,  area-feature  types  and  64 
linear-feature  types  at  one  time.  Each  area-feature  and 
linear-feature  type  can  be  individually  selected  or 
deselected  by  means  of  a  preselection  memory  during  the 
reconstruction  process.  This  preselection  memory 
specifies  selection/deselection  as  a  function  of  display 
scale  as  well  as  of  feature  type.  Thus,  detailed  feature 
data  can  be  decluttered  when  larger,  area  display  scales 
are  desired. 

DMG  Color  Assignments.  In  general,  colors  used  for 
DTMDS  point  and  linear  features  (both  topographic  and 
tactical)  are  highly  saturated  and  of  high,  signal  strength. 
Area  topographic  features,  in  contrast,  are  less 
saturated.  This  factor  maximizes  is  color  contrast  of 
points  and  lines  against  the  area  backgrounds. 

Map  Display  Scales,  in  order  to  maintain  ground- 
speed  and  data-coverage  requirements,  the  DTMDS  is 
capable  of  reconstructing  data  compressed  from  a  variety 
of  initial  spatial  resolutions.  Compressed  data  used  by  the 
DTMDS  are  provided  on  a  one-scale-set  per  tape  basis.  A 
scale  set  is  defined  as  tape  data  that  contains  up  to  68 
blocks  of  high-resolution  data,  and  up  to  16  blocks  of  low- 
resolution  data,  where  the  total  block  count  of  high-  and 
low-resolution  data  blocks  is  less  than  or  equal  to  68.  Map 
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teal*  act  identification  la  provided  in  the  tape  directory 
data  portion  of  the  tape  initialization  data.  The  DTMDE 
is  able  to  operate  oat  of  any  one  of  three  scale  sets. 
Geographic  coverage  par  block  in  both  basic  and 
expanded  scale  far  aaah  scale  set  is  described  in  Table  3. 


Table  3  DTMOf  GEOGRAPHIC  COVERAGE 


Each  Tape  Transport  Cartridge  (TTC)  can  contain 
any  one  of  the  three  scale  sets.  Any  two  scale  sets  can 
be  provided  using  two  TTCs.  When  using  the  same  scale 
set  for  both  TTCs,  up  to  twice  the  area  coverage  can  be 
provided.  When  two  different  scale  sets  are  available, 
either  one  is  available  for  display  through  the  DTMOS  at 
one  timet  however,  selection  of  the  other  scale  set 
requires  reinitialization  of  the  DTMOS. 

The  DTMDS  is  capable  of  operating  on  tape  data 
that  consist  totally  of  basic  scale  data.  In  this  case,  up 
to  68  blocks  of  basic  scale  data  can  be  provided  on  a 
single  tape.  Expanded  coverage  using  two  tapes  of  138 
blocks  of  basic  data  may  be  used.  The  display  scales 
available  per  scale  set  are  described  in  Table  4. 


Table  4  DTMDS  MAP  SCALES 
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These  display  scales  are  provided  in  a  way  that 
ensures  real-time  readout  to  the  display  of  either  scene 
memory  at  aircraft  velocities  dependent  on  the  following 

casess 

1.  Primary  Display  Mode  -  When  a  basic  and  an 
expanded  scale  are  in  the  two  scene  memories, 
respectively,  real-time  video  readout  of  either 
scene  memory  is  maintained  at  aircraft 
velocities  up  to  the  maximum  velocity 
indicated  in  Table  S. 


Table  S  DTMDS  A1RCRAPT  VELOCITY 
REQUIREMENTS 
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Table  8  DTMDS  ALTERNATE  DISPLAY  MODE 
VELOCITY  REQUIREMENTS 
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3.  Look-Ahead  Display  Mode  -  In  this  mode,  the 
DTMDS  is  capable  of  generating  and  supporting 
one  moving  map  in  one  scene  memory  centered 
about  the  aircraft  and  one  moving  or  static 
map  in  the  second  scene  memory.  The  moving 
or  static  map  in  the  second  scene  memory  is 
capable  of  being  located  geographically 
anywhere  in  the  available,  on-line,  DTMDS  data 
base  (of  the  same  scale  set),  n'hen  operating  in 
this  mode,  the  DTMDS  maintains  both  scene 
memories  with  priority  given  to  the  aircraft- 
centered,  scene  memory. 

Symbology 

The  symbol  generator  provides  a  seven-color, 
symbology  palette  to  overlay  on  the  terrain  map  or  to 


2.  Alternate  Display  Mode  -  When  both  scene 
memories,  centered  about  the  aircraft,  are 
reconstructed  out  of  the  besic  scale  set,  from 
Map  Scale  Set  *1,  reduced  aircraft  velocities 
up  to  the  maximum  indicated  in  Table  6  are 
maintained. 


present  a  symbology-only  display  (electronic  flight 
instrument).  The  map  overlay  symbology  consists  of 
point  features,  text,  circles,  flight-plan  lines,  cursors  and 
an  aircraft  symbol.  It  also  includes  the  bearing  to 
steerpoint  arrow. 

Typical  symbology  used  with  a  map  display  would 
include  flight  plans  and  point  features.  Point  features 
are  defined  in  the  DMA  data  base  ss  small  area  features, 
such  as  water  towers,  hospitals,  airports,  etc.  Each  is 
assigned  a  symbolic  representation  that  has  an  associated 
mnemonic.  Additional  point  features  may  be  defined  at 
mission  planning  time  by  using  existing  shape  codes  or  by 
making  a  new  shape  and  storing  it  in  RAM  reserved  for 
symbol  storage.  Some  are  used  as  steerpolnts  on  the 
flight  plan  while  others  are  used  as  interest  areas  off  of 
the  flight  plan.  Up  to  four  characters  of  text  may  be 
associated  with  each  point  feature.  The  shape  of  the 
symbol  provides  a  generic  identification.  The  text  is  used 
to  provide  additional  data  as  required.  The  color  of  the 
symbol  and  text  may  be  specified  independently.  A  circle 
centered  on  the  point  feature  may  be  specified  to 
indicate  an  area  of  influence  surrounding  the  feature. 
The  radius  of  the  circle  may  also  be  specified.  To 
increase  the  visibility  of  the  point  feature  when 
superimposed  on  the  map,  an  occlusion  zone  may  be 
specified  around  the  symbol  and  text.  This  zone  will 
block  out  the  map  data  to  provide  a  featureless 
background  for  the  symbology,  greatly  enhancing  its 
legibility. 

Flight  plans  are  indicated  by  connecting  point 
features  together  with  straight  lines.  The  symbol 
generator  organization  permits  the  changing  of  mission- 
related,  point  features  in  real-time.  Points  may  be  added 
to,  or  deleted  from,  the  flight  plan  at  any  time. 
Commands  to  edit  the  list  of  point  features  may  be 
received  by  means  of  the  1553B  bus. 

Point  Feature  Characteristics.  There  are  two 
general  categories  of  point  features  supported  by  the 
DTMDS  -  Local  Geographic  Point  Features  and  Global 
Point  Features.  In  addition,  there  are  two  types  of 
Global  Point  Features  -  Flight  Plan  Points  and  Interest 
Points.  The  DTMDS  provides  the  capability  of  storing  256 
local  geographic  points  for  each  scene  memory.  Each 
subblock  on  the  TTC  may  contain  up  to  64  local 
geographic  point  features.  A  total  of  96  global  point 
features  are  provided.  To  satisfy  the  need  for  a 
permanent  record  of  flight-annotated  point  features,  the 
DTMDS  is  able  to  write  these  points  on  tape.  The 
DTMDS  has  the  capability  of  drawing  circles  around 
global  point  features.  The  real-world  radii  that  are 
possible,  range  from  50  m  to  1062  km  in  116  discrete 
steps.  The  DTMDS  provides  a  means  to  remove  area, 
linear,  and  point  features  from  the  map  in  order  to 
prevent  overcrowding  of  the  display.  Two  additional 
declutter  bits  supplied  to  the  DTMDS  control  the  point 
feature  symbology.  These  are  the  text  declutter  bit  and 
the  circle  declutter  bit.  These  bits  allow  all-point- 
feature  text,  and/or  all-pofnt-feature  circles,  to  be 
collectively  decluttered. 

The  DTMDS  also  provides  25  point  features  which 
are  dedicated  to  depiction  of  the  flight  plan.  Each  flight- 
plan  point's  shape  and  color  are  specified  independently. 
The  flight-plan  points  are  initialized  from  the  TTC. 
Flight -plan  points  may  have  an  optional  circle.  The 
flight-plan  consists  of  line  segments  joining  flight  plan 


point  feature*.  An  external  command  is  able  to  select  or 
inhibit  the  display  of  the  flight  plan.  Each  TTC  has  a 
predefined  flight  plan.  Each  flight-plan  may  contain  up 
to  25  fllght-ple”  point  features  and  up  to  25  flight-plan 
lines. 

Five  point  features  are  dedicated  as  markpoints  in 
the  AFTI/F-16.  These  have  the  same  capabilities  as 
flight-plan  points,  but  are  used  to  indicate  points  of 
interest  beside  the  flight  path  such  as  new  threats  or 
potential  targets.  In  addition,  two  point  features  are 
reserved  for  depicting  AFTI/F-16  AMAS  bombing  routes. 

The  DTMDS  is  capable  of  accepting  updates  to 
flight-plan  points  while  the  aircraft  is  in  flight.  The 
updates  are  received  by  the  DTMDS  as  1553  data. 

Interest  Points.  In  addition,  the  DTMDS  provides 
64,  general-purpose,  interest  points.  Each  interest  point's 
shape  and  color  is  specified  independently.  The  interest 
points  are  initialized  from  the  TTC  and  may  have  an 
optional  circle.  The  DTMDS  is  also  capable  of  accepting 
updates  to  interest  points  while  the  aircraft  is  in  flight. 
The  updates  are  received  by  the  DTMDS  as  1553  data. 
Any  interest  point  may  have  an  optional  line  linking  it 
with  another  interest  point. 

Integrated  Flight  Display.  The  flight  instruments 
that  were  displaced  as  a  result  of  adding  the  CMFD  to 
the  center  pedestal  were  the  ADI  and  HSI.  This 
displacement  caused  a  need  for  electronic  flight 
instruments  on  the  CMFD.  However,  there  were  cases 
when  the  pilot  needed  both  ADI  and  HSI  information,  such 
as  during  a  landing  approach.  This  need  resulted  in  the 
design  and  implementation  of  a  new  flight  instrument, 
one  which  integrated  both  the  ADI  and  HSI  information. 
This  flight  instrument  is  called  an  Integrated  Flight 
Display  (IFD).  The  integrated  flight  display  combines  the 
information  contained  in  an  attitude  direction  indicator, 
a  horizontal  situation  indicator,  an  altimeter,  and  a 
velocity  scale  into  a  single-display  format  for 
presentation  on  the  Color  Multifunction  Display  (CMFD). 

FUNCTIONAL  GROWTH  OF  THB  DTMDS 

Mention  has  already  been  made  of  the  fact  that  the 
DTMDS  has  been  designed  for  additional  growth  in 
functional  capability.  This  growth  is  accommodated  in 
three  ways:  (1)  provision  of  additional  spare  processor 
card  slots  in  the  basic  DMG  (the  digital  map  processor) 
unit  to  allow  for  more  processing  capacity;  (2) 
substitution  of  higher-capacity,  data  storage  devices  to 
achieve  a  greater  geographic  area  coverage;  (3) 
preparation  of  the  appropriate  software  to  implement  the 
additional  processing  functions.  This  section  will  cover 
the  above  growth  capabilities  in  more  detail  and  will 
address  projected  future  functions  of  the  DTMDS. 

Increase  in  Processing  Capacity 

The  design  of  the  DMG  unit  is  based  on  an  efficient, 
global  bus  concept  in  which  the  multiple  microprocessors 
communicate  with  each  other  through  a  shared,  global 
memory.  The  bus  itself  is  pre-wired  to  three  spare  card 
slots  in  the  unit,  into  which  standard  processor  cards  may 
be  inserted  to  increase  processing  capacity.  In  the 
AFTI/F-16  application,  one  of  these  three  card  slots  is 
already  used  by  the  S1TAN  processor,  leaving  two  more 
slots  available  for  other  functions.  In  addition,  the 


STAN  processor  ItMlf  is  not  heavily  loaded,  and, 
therefore,  can  also  provide  support  for  other  processing 
operations. 

There  is  a  set  of  additional  functions  currently 
being  considered  for  implementation  in  the  DMG  unit. 
These  are  briefly  summarized  in  Table  7  and  will  be 
discussed  later  in  more  detail.  Table  7  illustrates  the 
comparative  processing  load  of  the  current  AFTI/F-18 
configuration  and  the  future  growth  capability  with 
additional  processor  cards  in  place  (columns  SP1  and  SP2 
in  the  table).  It  can  be  seen  that  the  overall  processor 
loading  is  quite  reasonable. 


Table  7  DMG  PROCESSOR  LOADING  SUMMARY 


Higher  Capacity  Data  Storage  Devices 

Because  of  their  availability  and  a  background  of 
performance  in  military  applications,  a  tape  cassette  is 
the  current  storage  medium.  Two  cassettes,  each  having 
a  capacity  of  25  megabits,  are  used  in  the  AFTI/F-16. 
This  somewhat-limited  capacity  necessitates  the 
compression  of  the  stored  data  to  achieve  reasonable 
coverage  of  the  geographical  area  of  interest. 

Higher-capacity  storage  could  allow  at  least  two 
options  to  be  considered:  (1)  an  expansion  of  the  area 
covered,  with  retention  of  the  data  compression,  and  (2) 
an  elimination  of  data  compression,  yielding  a 
simplification  of  the  processing  hardware  and  software. 
Performance  of  a  digital  terrain  system  is  largely 
dependent  on  the  type  of  storage  media  used,  and  for  the 
present  time,  the  only  reasonable  data  storage  is 
magnetic  tape.  When  higher-density  media  become 
available  and  qualified  for  aircraft  applications,  they  will 
also  be  considered  for  the  AFTI/F-18. 

At  the  present  time,  the  most  promising  storage 
device  is  the  optical  disk,  although  smaller,  magnetic- 
disk  systems  could  certainly  become  available  as  well. 
For  limited-area  coverage,  no  better  device  could  be  used 
than  a  solid-state  memory.  The  optical  disk,  however, 
offers  the  possibility  of  large  area  coverage  and  of 
storage  for  other  data  such  as  charts,  photos,  and 
approach  plates  -  ail  without  the  necessity  for  data 
compression. 

Additional  Processing  Functions 

We  have  briefly  explained  how  the  DTMDS  has  the 
capability  for  expansion  to  include  additional  processing 


functions.  We  will  now  summarize  several  representative 
processing  operations  that  are  being  considered  for  the 
enhancement  of  weapons  system  performance. 

Incorporation  of  Display 
Generator  Functions 

The  mechanization  of  the  pilot  interface  in  the 
AFTI/F-16  Is  made  possible  through  a  color  display  with 
typical  pushbutton  function  selection.  This  display 
generator  feeds  commands  to  the  DMG,  requiring 
additional  hardware  and  software.  By  adding  a  processor 
card  to  the  DMG,  it  is  possible  to  simplify  the  pilot 
interface,  eliminate  or.e  LRU  from  the  avionics  system, 
and  process  all  display  functions.  This  capability  includes 
all  of  the  currently,  implemented  functions  of  the 
present,  display  generator  except  stroke  writing  on  the 
CRT;  the  DMG  would  generate  all  display  outputs  in  a 
pure  raster  format.  It  has  been  found  that  the  stroke 
capability  lends  very  little  to  the  system  function,  and 
moreover,  its  effectiveness  becomes  severely  limited 
when  complex  displays  are  required.  Raster,  on  the  other 
hand,  has  no  such  limitations.  However,  brightness 
considerations  must  be  addressed  before  a  change  to  an 
all-raster  system  is  made. 

All  that  is  needed  to  provide  the  capability  of 
replacing  the  current  display  generator  is  to  add  the 
processor  card,  and  to  write  the  appropriate  software  for 
symbol  generation  and  switch  panel  translation.  This  la  a 
modest  effort  that  could  pay  huge  dividends  in  the 
reduction  of  avionics  hardware. 

Safe  Ground  Avoidance 

With  the  DLMS  data  base  on  board,  the  capability  of 
enhancing  the  ground  avoidance  function  exists.  The 
projected  improvement  uses  the  terrain  data  in 
conjunction  with  the  radar  data  and  includes  a  projection 
of  aircraft  flight  path.  Any  time  the  combination  of 
aircraft  altitude,  attitude,  or  flight  dynamics  indicates  an 
impending  ground  collision,  one  of  two  things  will  occur: 
either  (1)  the  pilot  will  receive  a  warning,  or  (2)  an 
automated  control  function  will  maneuver  the  aircraft  to 
a  safe  flight  envelope. 

All  of  these  functions  may  be  calculated  or 
processed  in  the  DMG  unit  by  the  use  of  currently 
available  aircraft  position  and  control  data.  The  blending 
of  the  radar  data  and  the  DLMS  terrain  data,  along  with 
the  necessary  processing  of  control  commands,  represents 
a  minimal  processor  load  in  the  DMG. 

Range  to  Sensor/Tracker  Target 

A  reasonably  simple  calculation  is  all  that  is  needed 
to  determine  the  range  to  a  target,  given  its  location  on 
the  ground,  or  given  the  angle  of  the  IR  sensor/tracker 
system.  This  will  allow  more  rapid  sensor  focusing,  laser- 
designator  motion  compensation,  or  other  weapon- 
delivery  calculations  at  a  time  when  fractions  of  a  second 
can  be  significant.  Table  7  illustrates  how  the  DMG's 
processing  capability  can  handle  these  calculations. 

Elevation  of  a  Selected  Point 

The  cursor  function  of  the  DTMDS  can  be 
implemented  to  allow  the  readout  of  the  elevation  at  the 


point  of  the  cursor's  location.  This  data  can  b«  used  to 
anhanco  mission  planning  or  weapon  delivery. 

Integrated  Flight  Display  (IFD) 

Using  the  available  data  in  the  avionics  system  and 
overlaying  a  flight  director  template,  a  completely 
integrated  electronic  flight  display  can  be  generated  on 
the  color  CRT.  Because  the  IFD  is  under  software 
control,  there  is  an  unlimited  number  of  variations 
achievable  in  the  visual  presentation. 

Interrisibility  Calculations 

The  elevation  data  base,  when  combined  with 
aircraft  position  and  altitude,  also  offers  the  possibility 
of  calculating  whether  or  not  the  aircraft  can  be  seen 
from  a  point  on  the  ground  or  vice  versa.  With  the 
symbol  generator  in  the  DMG,  a  pattern  can  be  plotted  to 
show  safe  areas  for  flight.  This  calculation  can  be 
performed  in  real  time,  allowing  the  pilot  to  make 
inflight  adjustments  of  his  route  for  maximum 
survivability.  Also,  line-of-sight  determination  to  target 
will  exist,  thus  allowing  a  minimum  exposure  profile 
during  target  designation.  The  most  frequent  use  of  this 
capability,  however,  would  normally  be  in  mission 
planning,  where  the  pilot  can  plot  his  course  based  on 
known  threats  and  their  envelopes  at  his  planned  altitude. 
He  can  adjust  his  planned  altitude  or  his  flight  path,  or 
both,  and  observe  the  effect  on  resulting  intervisibility 
patterns. 

CONCLUSION 

The  technology  brought  about  by  the  Digital  Terrain 
Mangement  and  Display  System  will  be  the  next  major 
advance  in  avionics  with  the  on-board  data  base  being  the 
key  that  unlocks  the  door  to  numerous  applications. 
Because  this  newly  emerging  technology  has  not  yet  been 
available  for  testing  and  evaluation,  its  full  usefulness 
has  not  been  determined.  However,  any  self-contained/ 
autonomous  terrain-data  base  which  correlates  with  other 
on-board  systems  will  enhance  the  present  positional 
accuracy  scheme.  Additionally,  as  display  evolution 
moves  towards  an  all-encompassing  information 
distribution  system,  a  Tactical  Situation  Display  (TSD), 
which  spatially  depicts  friendly  and  unfriendly  forces 
overlaid  on  topographic  features,  will  be  incorporated 
into  future  fighter  aircraft.  The  pilots  of  future,  tactical 
fighter  aircraft  cannot  be  expected  to  continue  to 
function  in  their  traditional  role  of  primary  systems 
operator  and  information  integrator.  The  AFTI/F-16  is 
attempting  to  transition  the  pilot  to  the  not-yet-fully- 
defined  role  of  systems  manager. 

The  AFTI/F-16  demonstrates  the  ability  to 
integrate  aircraft  systems  for  improved  pilot 
performance.  As  aircraft  systems  increase  in 
complexity,  the  pilot/manager  must  maintain  situational 
awart;...sa,  or  risk  reduced  survivability.  It  is  evident 
from  the  functions  presented  herein  that  the  digital  map 
provides  the  necessary  information  to  ensure  that  pilot 
survivability  is  enhanced. 
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ABSTRACT 

A  G-lnduced  loaa-of-conaclouaneaa  (GLOC)  and 
apatlal  dlaorlantatlon  auto-recovery  ayatea  haa 
been  developed  and  teated  on  the  Advanced  Fighter 
Technology  Integration  (AFTI)/F-16  aircraft.  The 
pilot  controla  the  operation  of  thia  ayatea  by 
entering  an  MSL  altitude  and  annually  arming  the 
ayatea.  Engagaent  conditions  of  the  auto-recovery 
aaneuver  are  controlled  by  aircraft  apeed,  alti¬ 
tude,  attitude,  and  the  aet  recovery  altitude  and 
do  not  depend  upon  any  deteralnatlon  of  pilot 
physiological  condition.  Initiation  of  the  recov¬ 
ery  aaneuver  la  preceded  by  vlaual  and  aural 
varnlnga  which  continue  until  the  pilot  reauaea 
control.  The  pilot  alwaya  haa  the  capability  to 
override  or  dlaengage  the  auto-recovery  aaneuver. 
This  ayatea,  aa  developed  on  the  AFTI/F-16,  la 
directly  and  quickly  applicable  to  other  analog  or 
digital  flight  control  ayateaa  such  aa  found  In  the 
F-16  or  F-18.  This  ayatea  provides  the  pilot 
protection  froa  ground  collision  In  aost  air-to-air 
training  envlronaents. 


INTRODUCTION 

With  a  simple  application  of  current  tech¬ 
nology  we  have  the  capability  of  preventing  aost 
fighter  accidents  attributed  to  spatial  disorient¬ 
ation  and  gravity-induced  loss-of-consciousnesa 
(GLOC).  This  can  be  done  with  an  autopilot  re¬ 
covery  systea,  such  as  the  GLOC  and  spatial  dis¬ 
orientation  auto-recovery  systea  currently  in  use 
on  the  Advanced  Fighter  Technology  Integration 
(AFTI)/F-16  advanced  developaent  aircraft. 

In  the  last  IS  years,  there  have  been  aore 
than  50  spatial  disorientation  aishapa  resulting  In 
the  loss  of  USAF  fighter  aircraft  and  aircrews.  In 
aore  recent  years,  as  aircraft  performance  capabil¬ 
ities  have  Increased,  pilot  Incapacitation  due  to 
GLOC  hae  also  been  Identified  as  a  serious  hazard. 
In  the  last  four  years  alone,  10  aircraft  and 
aircrews  were  lost  because  of  GLOC. 

These  are  grla  statistics  that  we  can  nearly 
eliminate  In  the  future.  In  the  9  months  between 
June  1985  and  February  1986,  a  GLOC  and  spatial 
disorientation  auto-recovery  systea  was  designed, 
tested,  and  put  Into  operation  on  the  AFTI/F-16. 

In  a  similar  short  period  of  tlae,  we  could  begin 
lncorporetlng  this  systea  on  current  fighter 
aircraft.  Further  delay  increasingly  shows  the 
need  for  such  a  systea.  As  an  exaaple,  during  the 
period  we  used  to  develop  and  test  the  AFTI/F-16 


auto-recovery  systea,  two  Air  Force  pllote  were 
killed  In  F-16' a  because  of  unrecognized  spatial 
disorientation.  In  both  of  these  accidents,  the 
pilots  were  on  routine  air  coabat  training  mis¬ 
sions.  They  lost  awareness  of  altitude  while 
looking  back  behind  their  aircraft  and  hit  the 
ground  without  realizing  they  were  In  danger.  Had 
the  AFTI/F-16  auto-recovery  system  been  Incorpor¬ 
ated  on  their  aircraft,  these  pilots  would  be  alive 
today.  With  simple  modifications,  this  auto¬ 
recovery  system  la  directly  and  quickly  applicable 
to  analog  or  digital  flight  control  systema  (such 
as  In  the  F-16  or  F-18)  or  to  other  aircraft  with 
autopilot  systems  (such  as  the  F-15). 

In  this  paper,  we'll  taka  a  brief  look  at  the 
AFTI/F-16  program  and  how  the  requirements  for  the 
auto-recovery  system  evolved.  With  thla  In  wind, 
we'll  present  the  alternate  approaches  we  examined, 
the  auto-recovery  system  design  and  testing,  and 
improvements  planned  for  the  future. 

AFTI/F-16  PROGRAM 

The  AFTI/F-16  Advanced  Development  Program  la 
a  Joint  US  Air  Force,  NASA,  US  Navy,  and  General 
Dynamics  Corporation  program.  The  overall  prograa 
Is  managed  by  the  Advanced  Developaent  Prograa 
Office  at  the  US  Air  Force  Wright  Aeronautical 
Laboratories,  Wrlght-Patterson  AFB,  Ohio.  Systems 
developaent  takes  place  at  General  Dynamics,  Fort 
Worth,  Texas  with  flight  testing  at  the  US  Air 
Force  Flight  Test  Center,  Edwards  AFB,  California. 

The  overall  AFTI/F-16  prograa  objectives  are 
to  develop  and  evaluate  new  technologies  and  to 
provide  flight-validated  technologies  for  future 
applications.  The  primary  technology  under  devel¬ 
opment  during  Phase  I  flight  test  (June  1982  to 
July  1983)  was  a  triplex  digital  flight  control 
systea  (DFCS)  with  eight  task-tailored  control  laws 
Incorporating  six  decoupled  (six  degree-of-f reedom) 
control  options.  Phase  II  testing  (July  1984  to 
present)  Includes  integration  of  sensors,  avionics, 
and  flight  controls  Into  an  Automated  Maneuvering 
Attack  Systea  (AMAS)  for  both  air-to-air  and  air- 
to-surface  automated  attack.  Included  In  AMAS  are 
a  conformally-mounted  forward-looking  Infrared 
tracker  and  laser  ranger,  voice  interactive 
avionics,  digital  terrain  map,  and  helmet  aounted 
sight.  The  integration  of  avionics  and  sensors 
with  flight  control  in  this  type  of  system  has 
required  the  development  of  a  System  Wide  Integrity 
Manageaent  (SWIM)  systea  to  provide  artificial 
redundancy  and  added  safety.  SWIM  monitors  all 
system  components  for  Integrity  and  provides  ground 
collision  avoidance  and  automatic  alr-to-alr 
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breakaway.  Development  of  an  auto-recovery  ayatea 
for  CLOC  and  spatial  dlaorlentatlon  waa  an  out¬ 
growth  of  this  SWIM  ayatea. 

AUTO-RECOVERY  SYSTEM  REQUIREMENTS 

Initially,  the  requirements  for  the  auto¬ 
recovery  ayatea  on  the  AFTI/F-16  were  Halted.  Aa 
has  been  typical  of  the  experimental  nature  of  the 
AFTI/F-16  prograa,  during  ayatea  developaent  It 
became  apparent  that  a  broader  aet  of  ayatea 
requirements  could  be  accomodated.  To  a  great 
extent,  thla  waa  the  reault  of  the  elmple  system 
design  chosen.  In  general,  the  requlreaenta  for 
the  design  evolved  to  the  following: 

Rqat  #1:  Protection  from  CLOC  -  This  waa 
Initially  the  only  requirement  for  the  ayatea: 
provide  protection  for  the  pilot  In  the  event  of 
G-lnduced  loss-of-consciousness •  The  automated 
maneuvering  system  being  developed  on  the  AFTI/F-16 
aircraft  for  alr-to-alr  has  full  flight  control 
authority  which  Includes  up  to  9  g's  at  high  onset 
rates.  CLOC,  with  this  automatic  alr-to-alr 
system,  la  considered  a  hazard  since  the  pilot  la 
not  flying  the  aircraft  and  therefore  not  complete¬ 
ly  anticipating  aircraft  accelerations.  The 
automated  maneuvering  system  for  alr-to-surface,  on 
the  other  hand,  la  limited  to  5  g's  of  authority. 

Aa  a  result,  CLOC  is  not  considered  likely  with  the 
alr-to-surface  system.  The  requirement  for  CLOC 
protection  was,  therefore,  restricted  to  the  alr- 
to-alr  (medium  to  high  altitude)  environment.  As 
It  turns  out,  although  there  has  been  at  least  one 
Incident  of  CLOC  in  the  F-16A  at  low  altitude, 
almost  all  CLOC  Incidents  have  been  In  the  alr-to- 
alr  environment.  Consequently,  this  system  has 
wide  applicability  as  a  protection  from  CLOC. 

Rqut  12:  Simplicity  -  In  the  development  of 
the  auto-recovery  system,  simplicity  became  an 
additional  requirement.  We  were  constrained  to 
develop  the  auto-recovery  system  within  the  capa¬ 
bilities  of  the  current  AFTI/F-16  system.  Thla  was 
actually  of  benefit  because  It  forced  us  to  develop 
a  system  simple  enough  that  It  had  wide  applicabil¬ 
ity  to  other  aircraft  and  other  safety  problems. 
This  naturally  led  to  our  final  requirement. 

Rqmt  #3:  Wide  Applicability  -  In  the  Initial 
development,  the  AFTI/F-16  auto-recovery  system  was 
planned  to  be  applicable  to  CLOC  in  both  the 
AFTI/F-16  and  the  basic  F-16.  The  system  as 
developed,  however,  Is  also  applicable  not  only  to 
other  modern  aircraft,  such  as  the  F-18,  but  also 
to  spatial  disorientation — a  potentially  wider 
application  than  CLOC. 

ALTERNATIVE  APPROACHES 

During  the  design  of  the  AFTI/F-16  auto¬ 
recovery  system,  several  approaches  Involving 
numerous  design  Issues  we  re  considered.  The  Issues 
can  generally  be  grouped  Into  two  areas.  First,  we 
had  to  determine  what  we  would  use  to  Initiate  the 
auto-recovery  maneuver;  and  second,  we  needed  to 
establish  the  proper  flight  path  for  the  auto¬ 
recovery  itself. 

Initial  discussions  centered  around  attempting 
to  make  some  determination  of  pilot  condition  In 
order  to  trigger  the  auto-recovery.  Consideration 
was  given  to  using  physiological  sensors  to 


determine  whether  the  pilot  was  conscious. 

Possible  physiological  sensing  methods  Included 
comparison  of  the  Fourier  transform  of  pilot 
brainwave  patterns  (EEC),  determination  of  retinal 
blood  flow  or  pupilary  reflexes  with  Infrared 
lasers  directed  at  the  eye,  or  the  use  of  an 
Infrared  laser  directed  through  the  skull  to  sense 
blood  flow  to  the  brain.  A  variation  of  the 
physiological  sensing  aethods  was  to  use  a  stick 
force  sensor  to  Initiate  autorecovery  after  some 
sequence  of  aircraft  accelerations  that  ended  with 
the  pilot  letting  go  of  the  stick.  The  advantage 
of  such  systeas  is  that  If  the  reaction  of  the 
system  Is  quick  enough,  it  would  be  good  at  any 
altitude  and  require  no  radiating  sensors,  such  as 
a  radar  altimeter. 

Systems  using  stick  force  or  physiological 
sensors,  however,  have  the  disadvantage  that  the 
design  and  Implementation  are  complicated,  requir¬ 
ing  extensive  redundancy  and  sophistication  In 
order  to  prevent  inadvertent  engagements.  They 
also  use  complex  unproven  technology  currently  only 
In  the  early  stages  of  development.  The  Initiation 
of  the  recovery  maneuver  would  also  not  be  keyed 
off  actual  aircraft  flight  path  or  altitude;  and 
because  there  Is  significant  time  anticipated 
between  the  actual  CLOC  and  the  recognition  of  CLOC 
by  the  recovery  system,  the  aircraft  could  end  up 
In  a  condition  where  recovery  is  not  possible  when 
the  auto-recovery  Is  Initiated.  The  aost  serious 
disadvantage,  however.  Is  that  these  types  of 
systems  can  only  be  used  for  CLOC  and  are  not 
useful  for  spatial  disorientation.  Because  of 
these  reasons,  determination  of  pilot  physiological 
condition  in  order  to  Initiate  recovery  was  not 
chosen  for  the  auto-recovery  system. 

The  alternative  to  the  use  of  physiological  or 
stick  force  sensors  was  to  have  the  recovery 
Initiated  by  aircraft  attitude,  airspeed,  and 
altitude  compared  to  some  set  mlnlaua  altitude. 
Ideally  such  a  system  would  use  above-the-ground 
(AGL)  altitude  In  order  to  cover  all  possible 
causes  of  CLOC  or  spatial  disorientation,  and 
perhaps  have  a  combat  application.  This  type 
of  system  would  require  the  use  of  an  external  ACL 
sensor  such  as  a  terrain-following  radar  or  the  use 
of  a  digital  terrain  data  base  In  combination  with 
a  digital  map,  global  positioning  system,  or  other 
sophisticated  determination  of  AGL  altitude.  This 
would  have  required  a  major  development  program 
with  significant  aircraft  modifications.  This  was 
not  within  the  scope  of  the  current  AFTI/F-16  test 
program  and  would  also  have  resulted  In  a  system 
with  limited  applicability  to  current  aircraft. 

We  chose  instead  to  use  a  pilot  selected  mean- 
sea-level  (MSL)  altitude  as  the  set  minimum  alti¬ 
tude.  The  advantages  of  this  approach  are  that  It 
Is  simple  and  easy,  requires  no  external  ACL  or 
other  sophisticated  sensor,  and  that  It  is  usable 
for  both  '.OC  and  spatial  disorientation.  The 
primary  disadvantage  Is  that  it  Is  not  usable  at 
very  low  AGL  altitudes  3nd  relies  upon  pilot 
judgement  of  the  safe  MSL  recovery  altitude.  Such 
a  system,  however,  has  wide  applicability  and 
simplicity — providing  protection  In  the  training 
environment  where  most  CLOC  and  spatial  disorienta¬ 
tion  Incidents  have  occurred. 

When  we  designed  the  auco-recovery  system,  the 
SWIM  ground  collision  avoidance  system  had  already 
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been  proven  in  flight  tcet  for  uae  with  the  auto¬ 
mated  attack  system.  It  was  apparent  that  a 
similar  arrangement  would  provide  the  neceaaary 
auto-recovery  aaneuver.  The  flrat  laeue,  however, 
waa  the  aaount  of  acceleration  the  auto-recovery 
ayetea  ahould  uae.  The  eaaleat  choice  waa  to  uae  S 
g's  becauae  that  waa  already  proven  In  the  SVIM 
ayetea.  Using  acre  than  S  g'a  waa  not  juatifled 
for  the  training  envlronaent,  would  have  dlaalpated 
energy  required  to  aaintain  level  flight  after  the 
recovery,  and  could  poaelbly  aggravate  a  GLOC 
altuation.  Five  g'a  waa  therefore  choaen  for 
higher  apeada,  with  a  Halt  of  IS  degreea  angle  of 
attack  (AOA)  for  low  apeed. 

The  SVIH  ground  colllelon  avoidance  recovery 
reaulta  In  a  ballistic  flight  path  that  requlrea 
the  pilot  to  laaediately  reauae  aircraft  control. 

We  r-;led  thla  out  for  the  auto-recovery  ayatea 
because  the  pilot  would  be  Incapacitated  after 
GLOC.  We  conaldered,  lnatead,  three  alternative 
flight  patha:  a  level  or  cllablng  turn,  a  wings- 
level  cllab,  or  wlnge-level  altitude  hold.  We 
decided  aaong  theae  flight  patha  based  on  how  long 
the  auto-recovery  ayatea  would  have  to  protect  the 
pilot. 

Studiee  of  CLOC  episodes  In  flight  and  centri¬ 
fuge  testing  showed  that  the  duration  of  Incapaci¬ 
tation  froa  GLOC  la  froa  9  to  21  seconds  with  an 
absolute  maximum  of  30  aeconda.  The  duration  of 
unrecognised  apatial  disorientation  should  only  be 
aoaentary.  Indicating  that  the  aaxlaua  tlae  before 
the  pilot  should  reauae  aircraft  control  after  an 
auto-recovery  la  30  seconds.  Since  we  did  not 
Intend  thla  ayatea  to  be  applied  to  a  aora  serious 
pilot  Incapacitation,  a  longer  safe  recovery  tlae 
than  30  aeconda  was  not  required. 

For  this  short  period  of  tlae,  we  decided 
against  leaving  the  aircraft  In  a  level  or  cllablng 
low  g  turn.  The  Increase  In  coaplexlty  did  not 
justify  the  aaall  increase  In  safety.  Centrifuge 
teste  conducted  at  the  US  Air  Force  School  of 
Aerospace  Medicine  (USAFSAM)  showed  no  Increase  In 
lncapecltlon  tlae  when  the  pilot  was  left  at  2  g'a. 
Instead  of  1  g  after  GLOC.  The  aircraft  does  not, 
however,  travel  forward  a  significantly  shorter 
distance  when  In  a  low  g  turn.  For  exaaple,  as 
shown  In  Figure  1,  an  aircraft  In  a  2  g  turn  at  600 
knots  true  airspeed  (KTAS)  travels  forward  3  alias 
In  30  seconds.  In  wings  level  flight  the  aircraft 
would  go  only  2  miles  further.  We  wouldn't  gain 
very  much,  therefore,  by  having  the  aircraft  In  a 
turn. 
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Figure  1  Distance  Traveled  in  30  Seconds 


Although  a  wings  level  cllab  for  a  final 
flight  path  does  show  clear  advantages,  such  a 
climb  would  be  at  the  expense  of  aircraft  energy. 
This  requlrea  the  angle  of  climb  to  be  a  function 
of  airspeed  and  the  angle  of  climb  to  decrease  If 
airspeed  Is  decreasing.  We  elected  to  take  a  more 
simple  approach  which  was  to  leave  the  aircraft  in 
wings  level  altitude  hold.  A  system  that  would 
climb  was  left  for  possible  future  development. 

Another  design  consideration  was  whether  the 
system  would  be  automatic  or  require  pilot  action 
to  engage  or  arm.  Ideally,  the  operation  would  be 
automatic.  This  Is  not  feasible,  however,  In  a 
system  where  recovery  la  Initiated  with  reference 
to  a  set  MSL  altitude  because  a  significant  portion 
of  a  normal  flight  would  be  flown  below  that 
altitude.  We,  therefore,  made  system  operation 
pilot  selectable.  A  future  system  ualng  ACL 
altitude  could  be  automatic. 

Warnings  of  Impending  auto-recovery  were 
deemed  an  essential  part  of  the  system.  We  Intend¬ 
ed  these  warnings  to  allow  the  pilot  to  disengage 
the  auto-recovery  system  before  an  impending 
auto-recovery  maneuver.  This  feature  would  be  uaed 
in  the  event  of  unrecognized  spatial  disorienta¬ 
tion  or  when  the  system  was  Inadvertently  left  on 
during  an  intentional  descent  below  the  set  minimum 
altitude.  The  visual  warnings  In  the  HUD  and  MFDs 
developed  and  teated  from  SWIM  ground  collision 
avoidance  were  appropriate  for  the  auto-recovery 
system.  Based  on  centrifuge  tests  at  USAFSAM, 
aural  warnings  were  expanded  for  uae  In  the  auto¬ 
recovery  system.  These  studies  have  shown  that 
pilot  incapacitation  tine  can  be  decreased  by  the 
use  of  tones  and  lights.  An  even  more  significant 
decrease,  however,  can  be  gained  by  actually 
talking  to  the  pilot.  We  therefore  use  a  combina¬ 
tion  of  lights,  tones,  and  voice  aynthesls  to 
generate  warnings. 

Some  capability  for  the  pilot  to  override  the 
auto-recovery  was  seen  to  be  a  necessary  part  of 
the  auto-recovery  system.  In  the  AFTI/F-16  system, 
we  gave  the  pilot  full  aircraft  control  capability 
to  override  the  auto-recovery  outside  a  set  stick 
force  breakout.  In  addition,  full  pitch  stick 
(either  direction)  and  a  paddle  switch  on  the  stick 
are  methods  the  pilot  can  use  to  disengage  the 
auto-recovery  maneuver  once  It  begins.  Prior  to 
the  sctual  auto-recovery,  a  paddle  switch  on  the 
stick  can  also  be  used  to  turn  the  system  off  and 
prevent  the  auto-recovery.  In  another  aircraft,  a 
different  arrangement  would  probably  be  appropri¬ 
ate. 

The  last  issue  was  the  choice  of  an  appropri¬ 
ate  altitude  source.  The  most  accurate  source  of 
altitude  is  available  froa  the  inertial  navigation 
system  (INS).  This  system,  although  reliable,  is 
not  redundant  and  inaccuracies  are  not  necessarily 
detectable  to  the  pilot.  We  chose  Instead  to  use 
the  Central  Air  Data  Computer  (CADC)  for  altitude 
because  the  necessary  Interfaces  with  the  flight 
controls  were  already  established  for  other  uses 
and  required  few  changes.  The  CADC  outputs  can 
also  be  compared  with  inputs  taken  directly  from 
the  pltot-statlc  instruments.  The  disadvantage  of 
this  approach  Is  the  need  to  compensate  for  alti¬ 
meter  1*1  which  Is  significant  at  steep  dive  angles 
and  high  mach.  A  possible  future  improvement  would 
be  to  use  INS  altitude  compared  with  CADC  and 


pltot-stadc  outputs.  He  did  use  the  INS  to 
determine  aircraft  attitude  which  we  deemed  accept¬ 
able  because  this  INS  failure  la  Indicated  to  the 
pilot. 


SYSTEM  OPERATION 


In  flight,  the  auto-recovery  system  Is  In  one 
of  four  states:  Off,  Standby,  Armed,  or  Engaged. 

In  the  “Off*  state,  all  system  functions  are 
Inoperative  and  none  of  the  calculations  for  the 
auto-recovery  are  performed.  The  auto-recovery 
system  Is  considered  on  If  the  state  Is  "Standby’ 
or  "Armed".  If  the  appropriate  conditions  are  met 
when  the  system  Is  In  the  "Armed"  state,  the  state 
changes  to  "Engaged"  which  means  the  auto-recovery 
maneuver  Is  being  performed. 

At  startup,  the  auto-recovery  state  la  "Off". 
The  pilot  requests  the  system  to  be  on  ("Standby" 
or  "Armed")  through  the  cockpit  multifunction 
displays  (MFDs).  The  system  will  remain  "Off," 
however.  If  the  Inertial  navigation  system  (INS)  Is 
Inoperative,  the  landing  gear  or  flaps  are  extend¬ 
ed,  there  Is  a  dual  failure  of  the  flight  control 
system,  or  the  pilot  has  not  set  a  minimum  altitude 
(floor).  This  last  requirement  was  Included  to 
ensure  the  pilot  has  set  a  floor  appropriate  to  the 
terrain  on  that  flight.  Since  the  auto-recovery 
system  uses  MSL  altitude.  It  Is  not  appropriate  to 
use  a  standard  startup  value  or  a  value  set  on  a 
previous  flight,  either  of  which  might  not  be  a 
safe  value  for  the  planned  flight  terrain.  The 
floor,  therefore,  la  set  to  zero  at  startup,  and 
the  system  cannot  be  turned  on  If  the  floor  remains 
zero.  In  addition,  we  do  not  want  an  auto-recovery 
maneuver  to  occur  at  or  shortly  after  the  time  the 
system  Is  turned  on.  The  system  remains  "Off"  If 
when  the  pilot  requests  the  system  to  be  turned  on, 
the  aircraft  Is  at  or  below  the  floor  plus  500  feet 
or  within  5  seconds  of  an  auto-recovery.  Once  the 
system  Is  turned  on,  a  failure  of  the  INS,  dual 
failure  In  the  flight  controls,  or  extending  the 
landing  gear  or  flaps  causes  Che  auto-recovery 
system  to  revert  to  the  "Off"  state. 

Once  the  auto-recovery  system  Is  on,  the  auto¬ 
recovery  state  Is  "Standby"  or  "Armed"  depending  on 
the  position  of  the  air  refueling  door.  An  inad¬ 
vertent  auto-recovery  during  air  refueling  would  be 
catastrophic  and  therefore,  the  auto-recovery 
system  reverts  to  "Standby"  when  the  air  refueling 
door  Is  opened.  In  the  "Standby"  state  as  In  the 
"Off"  state,  all  system  functions  are  Inoperative. 
When  the  air  refueling  door  la  closed,  the  auto¬ 
recovery  state  automatically  changes  back  to 
"Armed"  without  any  additional  pilot  action.  The 
exception  Co  this  occurs  when  the  aircraft  is  below 
the  floor  plus  500  feet  or  within  5  seconds  of  an 
auto-recovery.  In  this  case,  the  system  goes  to 
"Off"  Instead  of  "Armed"  from  the  "Standby"  state. 

The  actual  auto-recovery  maneuver  Is  keyed  off 


the  tlme-to-go  to  auto-recovery,  t  .  This  time  Is 


only  calculated  when  the  auto-recovery  state  Is 
"Armed."  When  t  goes  to  zero,  the  auto-recovery 
state  changes  toarEngaged"  and  the  aircraft  rolls 
wings  level  at  a  rate  proportional  to  the  bank 
angle  (maximum  of  180  degrees/second).  At  bank 
angles  greater  than  +120  degrees,  the  load  factor 
Is  commanded  to  cosine  of  the  pitch  attitude  times 
cosine  of  the  bank  angle  (which  will  be  -1  g  for 


level  flight  Inverted).  As  bank  angle  decreases 
below  +120  degrees,  the  load  factor  command  In¬ 
creases  until  It  la  5  g's  when  the  bank  angle  la 
leas  than  +90  degrees.  This  5  g  command  continues 

This  results  In  a 


until  V  Is  greater  than  zero, 
climbing  flight  path  as  the  maneuver  transitions  to 
altitude  hold.  The  aircraft  levels  off  and  holds 
500  feet  above  the  floor.  Using  this  altitude 
Instead  of  the  floor  Itself  makes  the  recovery 
maneuver  smoother  (the  flyup  portion  already 
results  In  a  climb)  and  helps  prevent  an  Inadvert¬ 
ent  second  flyup.  If  the  aircraft  speed  decreases 
to  15  degrees  angle  of  attack  (A0A),  the  recovery 
load  factor  Is  reduced;  and  If  level  flight  cannot 
be  maintained  at  15  degress  AOA,  the  aircraft  will 
descend. 

If  the  INS  falls  during  the  auto-recovery 
maneuver,  the  auto-recovery  Is  terminated  when 
flight  path  la  +3  degrees  or  higher  and  the  bank 
angle  less  than  +15  degrees  based  on  flight  control 
system  estimated  attitudes.  No  altitude  hold 
feature  Is  Included. 

Tlme-to-go  to  auto-recovery  (t  )  Is  computed 
whenever  the  auto-recovery  system  lir"Armed*  and 
the  vertical  velocity  (V  )  Is  less  than  zero.  If 
t  is  not  being  computei.  It  Is  set  to  10  seconds, 
wfien  t  Is  being  computed,  It  Is  found  from  the 
following: 


“msl 
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for  V  <0 


where  "msl 
H. 


FLOOR 
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■  selected  MSL  altitude 
*  set  recovery  altitude  (floor) 

-  altitude  required  for  recovery 

-  INS  vertical  velocity 


If  t  Is  less  than  zero  using  the  above 
formula,  ?F  Is  set  equal  to  zero  In  order  for  HUD 
symbology  to  be  displayed  properly  (see  the  next 
section) . 

Selected  MSL  altitude  (H^g, )  Is  the  current 
aircraft  barometric  altitude  reduced  by  an  amount 
proportional  to  the  vertical  velocity: 


*SlSL 


H 


CADC 


K*V 


Using  these  formulas,  t  decreases  as  ver¬ 
tical  velocity  Increases  (ata£he  same  barometric 
altitude)  which  Is  a  compensation  for  altimeter  lag 
errors.  The  CADC  supplies  the  auto-recovery  system 
with  barometric  altitude  compensated  for  non¬ 
standard  day.  If  the  CADC  data  is  bad,  the  current 
aircraft  altitude  Is  determined  from  the  static 
pressure  ratio  with  direct  Inputs  to  the  flight 
control  system  from  the  pltot-statlc  system. 

Is  then  reduced  by  1000  feet  to  compensate  for 
possible  errors  on  a  nonstandard  day: 


“msl 


"Ps/Po 


+  V 


-  1000 


The  altitude  required  for  recovery  (AH)  Is 
calculated  based  upon  the  flight-tested  SWIM  ground 
collision  avoidance  algorithm.  This  algorithm  was 
derived  from  data  gathered  during  real  time  simula¬ 
tion  of  flyup  maneuvers.  The  SWIM  altitude 
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required  for  ground  collision  avoidance  (AZ)  Is 
found  froa  the  following  empirical  formula: 

AZ  -  AZj  +  AZ2  +  AZ3 

where  AZ^  «  altitude  required  for  wings  level 
non-rolling  flyup 

A Zj  -  additional  altitude  required  for  roll 
angle  or  roll  rate 

AZ.  •  additional  altitude  required  for 
Initial  load  factor  (g) 

This  approach  has  proven  effective  within  the 
airspeed  Halts  It  was  designed  for  (260-580  KCAS). 
The  auto-recovery  system,  however,  is  designed  with 
no  airspeed  Halts  and  an  additional  factor,  AZ,, 
Is  added  at  low  speed  to  compensate  for  the  smaller 
load  factor  that  Is  available  at  lower  speeds.  In 
addition,  we  assuaed  the  auto-recovery  would  aost 
likely  be  initiated  when  the  aircraft  Is  In  a 
steep,  high  speed  dive  (the  most  likely  CLOC  sce¬ 
nario).  In  such  a  dive,  the  additional  altitude 
required  because  of  roll  attitude,  roll  rate,  and 
Initial  load  factor  becomes  less  significant. 
Penetrations  of  the  floor  by  several  hundred  feet 
were  also  not  considered  significant  In  a  system 
using  an  MSL  altitude  floor,  which  would  be  set 
several  thousand  feet  above  the  ground.  As  a 
result,  we  simplified  the  calculation  of  the  al¬ 
titude  required  for  auto-recovery  to: 

H  -  AZj  +  AZa 

Figure  2  shows  the  MSL  altitude  that  the 
auto-recovery  system  will  engage  with  the  floor  set 
at  10,000  feet  MSL  for  various  dive  angles  and 
airspeeds. 

PILOT  VEHICLE  INTERFACE 

The  pilot  controls  the  auto-recovery  system 
through  switches  on  the  MFDs  and  the  control  stick. 
Visual  and  aural  warnings  are  provided  through  the 
MFDs,  the  head-up  display  (HUD),  and  the  voice 
synthesis  system. 

The  minimum  altitude  (floor)  Is  set  through 
the  MFD  flight  control  page.  Altitudes,  entered  to 
the  nearest  10  feet,  will  be  rejected  If  not 
between  0  and  20,000  feet.  Once  entered,  the 
current  floor  value  Is  sent  continuously  from  the 
flight  control  system  for  display  to  the  nearest 
foot  on  the  MFD  flight  control  page.  The  pilot 
turns  the  system  on  using  one  of  the  buttons  on  the 
MFD  when  the  flight  control  page  is  displayed.  The 
MFD  shows  OFF,  STBY,  or  ARM  depending  on  the  system 
state.  If  t  Is  less  than  1  second,  the  MFDs  will 
all  show  a  flashing  'Break  X'  overlaid  across  the 
current  display.  The  flight  control  MFD  page  alao 
shows  the  following  fault  messages  when  required: 

Fault  Meaning 

OMR  CLOC  FLYUP  auto-recovery  engaged 

OMR  ALT  auto-recovery  "armed"  request  was 

rejected  because  the  floor  was 
zero  or  the  aircraft  was  below 
the  set  floor  plus  500  feet  or 
within  5  seconds  of  flyup 


OMR  FCS  auto-recovery  system  was  forced 

'Off'  because  the  landing  gear  or 
flaps  were  extended 

FAIL  FCS  auto-recovery  system  was  forced 

'Off'  because  there  was  a  dual 
flight  control  failure 

FAIL  INU  DATA  uto-recovery  system  was  forced 

'Off'  because  the  INS  failed 

NORM  SWITCH  auto-recovery  system  was  turned 

"Off”  by  the  pilot  through  the 
switch  on  the  MFD  flight  control 
page  or  the  upper  paddle  switch 
on  the  stick 


KNOTS  TRUE  AIRSPEED 

Figure  2  Recovery  Initiation  Altitude  Above 
Floor 

The  AFTI/F-16  side  stick  controller  has  an 
upper  and  lower  paddle  switch  used  to  control 
numerous  functions  related  to  operation  of  the 
automated  maneuvering  system  being  tested  on  the 
aircraft.  Because  of  this,  we  were  limited  In 
using  these  switches  to  control  the  auto-recovery 
system.  When  the  time-to-go  to  suto-recovery  (t,f) 
is  less  than  5  seconds,  the  upper  paddle  switch  can 
be  used  to  turn  the  auto-recovery  system  off.  When 
the  auto-recovery  Is  actually  taking  place  (enga¬ 
ged),  the  lower  paddle  switch  can  be  used  to 
discontinue  the  auto-recovery  maneuver,  but  the 
system  remains  armed.  In  addition,  90  percent  of 
maximum  stick  force  up  or  down  also  terminates  the 
auto-recovery  maneuver  with  the  system  remaining 
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tmd<  This  1*  not  an  Ideal  arrangement  for  a 
production  eyatem.  In  a  production  system  only  one 
evltch  on  the  stick  would  be  appropriate .  This 
switch  would  Interrupt  operation  of  the  system  when 
It  was  depressed  and  held  but  would  not  turn  It 
off.  This  way  the  pilot  could  prevent  an  auto¬ 
recovery  when  It  was  not  desired  with  the  system 
remaining  armed.  In  addition  to  hands-on  controls 
to  terminate  an  auto-recovery,  the  pilot  can 
override  or  blend  with  the  auto-recovery  system  by 
using  greater  than  6  percent  of  maximum  stick  force 
In  pitch  or  40  percent  in  roll. 

When  any  of  the  fault  messages  (listed  above) 
are  sent  by  the  auto-recovery  system  for  display  on 
the  MFDs,  a  250  Ha  tone  of  0.25  or  1.5  seconds 
(depending  on  the  fault)  la  generated.  In  addi¬ 
tion,  a  red  Integrated  fire  and  flight  controls 
(IFFC)  warning  light  to  the  right  of  the  HUD  Is 
Illuminated  for  3  or  5  seconds  (depending  on  the 
fault).  At  5  seconds  to  flyup,  the  voice  synthesis 
system  announces  "pullup,  pullup*.  A  minimum  of  5 
seconds  Is  required  before  this  message  can  be 
repeated  In  the  event  the  pilot  Is  flying  In  and 
out  of  5  seconds  to  auto-recovery.  At  auto¬ 
recovery,  the  I FTC  warning  light  lllumlnatea  and 
the  tone  is  generated  for  1.5  seconda.  This  Is 
followed  by  "flyup,  flyup"  from  the  voice  system. 
"Pullup,  pullup"  Is  then  repeated  every  5  seconds 
with  the  IFFC  warning  light  continuously  on  until 
the  auto-recovery  system  Is  disengaged  by  the 
pilot. 

When  tlme-to-go  to  auto-recovery  (t  )  Is  less 
than  5  seconds,  chevrons  are  displayed  on  the  HUD 
at  a  distance  apart  corresponding  to  t  (see 
Figure  3).  At  t  equals  aero  the  che$Fons  come 
together  to  form* a  "Break  X"  In  the  HUD.  The 
mnemonic  BKWY  (breakaway)  la  then  also  displayed  In 
the  lower  right  of  the  HUD. 


Figure  3  HUD  Display 


SYSTEM  REDUNDANCY 

Auto-recovery  system  redundancy  is  not  con¬ 
sidered  an  important  requirement.  As  long  as  the 
pilot  is  made  aware  of  system  failures  through  a 
bullt-ln  test  /"*T)  system,  the  auto-recovery 
system  does  no.  .teed  to  be  redundant.  For  example, 
modifying  the  existing  aircraft’s  autopilot  with 
the  auto-recovery  system  was  considered  a  viable 
option.  The  flight  control  syatem  on  the 
AFTI/F-16,  however,  Is  a  triplex  digital  control 
syatem.  Changing  this  software  was  the  easiest  way 
to  Incorporate  the  auto-recovery  system.  As  a 
result,  the  AFTI/F-16  auto-recovery  system  became 
part  of  the  flight  control  computers  themselves. 
Interfaces  with  other  aircraft  systems  are  through 
the  aircraft  multiplex  bus  system.  Such  an  ar¬ 
rangement  on  another  aircraft,  requiring  changes  to 
the  flight  control  system  itself,  may  not  be 
necessary  or  desirable. 

The  AFTI/F-16  auto-recovery  system  Is  designed 
to  be  "first  fall  operate".  All  single  failures  of 
the  flight  controls  (no  matter  how  many  there  are), 
failure  of  the  fire  control  computer,  or  the  CADC 
have  no  effect  on  auto-recovery  system  operation. 
Total  failures  of  the  INS,  stores  management  set, 
or  multiplex  bus  do  prevent  engagement,  although  an 
auto-recovery  would  continue  with  these  failures  If 
already  engaged.  Loss  of  the  HUD,  MFDs,  or  Voice 
do  not  effect  system  operation,  except  for  the  lose 
of  displays  or  warnings. 

The  auto-recovery  syatem  Is  also  designed  to 
be  "dual  fall  safe".  A  dual  failure  of  any  part  of 
the  flight  control  system  Immediately  diaarms  the 
auto-recovery  system.  This  prevents  an  abnormal  or 
Inadvertent  auto-recovery  due  to  flight  control 
failures. 

FLIGHT  TEST  RESULTS 

The  complete  auto-recovery  system  was  released 
for  simulator  verification  and  validation  testing 
In  the  AFTI/F-16  simulator  at  Fort  Worth  on 
February  3,  1986.  Flight  testing  began  at  Edwards 
AFB  on  February  20,  1986.  The  basic  auto-recovery 
system,  including  displays  and  warnings,  operated 
correctly  from  the  beginning  of  flight  test.  At 
most  dive  angles  and  airspeeds  the  auto-recovery 
maneuver  was  satisfactory.  Some  improvements, 
however,  will  be  made  at  steep  dive  angles  where 
the  system  Is  too  conservative  when  upright,  and 
results  In  some  penetrations  of  the  floor  when 
Inverted . 

As  a  result  of  flight  tests,  the  auto-recovery 
system  is  operational  on  the  AFTI/F-16  providing 
protection  to  the  pilot  when  required.  Flight 
testing  of  the  auto-recovery  system  will  continue 
through  Spring  1986  as  changes  are  made  to  improve 
system  performance. 

FUTURE  IMPROVEMENTS 

A  limited  ACL  capability  Is  planned  for  Spring 
1986  as  an  Improvement  for  the  current  auto¬ 
recovery  system.  When  AGL  data  is  valid  from  the 
radar  altlmiter  on  the  AFTI/F-16,  an  auto-recovery 
will  be  keyed  off  either  the  set  MSL  floor  or  an 
AGL  minimum  descent  altltlde  (MDA)  set  separately 
by  the  pilot  (whichever  will  be  reached  first). 
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PHASE  II  SYSTEM 


This  extra  capability  la  aeant  for  protection  In 
auch  anvironaenta  aa  vlaual  low-level  navigation  or 
in  the  '.;<struaent  approach  pattern  prior  to  final. 
Thla  systca  would  be  Intended  for  shallow  dive 
angles  and  will  require  a  more  accurate  deterain- 
ation  of  the  altitude  required  for  recovery,  AH. 
Such  a  ayatea  has  already  been  proven  on  the 
AFTI/F-16  for  ground  collision  avoidance  (SHIM)  and 
will  use  the  following  foraula  for  H: 

AH  -  AZt  +  AZ2  +  AZ3  +  AZ6 

where  each  of  the  teras  are  defined  In  the  System 
Operation  section  above.  To  support  thla  capabil¬ 
ity,  the  AFTI/F-16  ayatea  will  also  be  aade  avail¬ 
able  In  all  flight  control  aodea. 

laproveaents  are  also  planned  to  refine  the 
calculations  of  pull-up  altitude  when  using  the  MSL 
altitude  based  auto-recovery.  The  auto-recovery 
ayatea  will  be  aade  less  conservative  during  steep 
dives  at  upright  attitudes  and  more  conservative 
when  Inverted.  The  intention  will  be  to  have  the 
ainlaum  altitude  for  aost  auto-recovery  maneuvers 
between  the  floor  and  500  feet  above  the  floor. 

Two  additional  laproveaents  are  being  Inves¬ 
tigated  for  the  current  system.  The  first  la  to 
Incorporate  a  climb  capability  for  tha  auto¬ 
recovery  to  be  used  Instead  of  altitude  hold  at 
higher  throttle  settings  or  airspeeds.  The  second 
Is  to  use  the  INS  as  the  prlaary  source  of  altitude 
with  the  CADC  and  pltot-statlc  inputs  to  the  flight 
controls  as  backups. 

APPLICATION  OF  AUTO-RECOVERY  SYSTEM  TO  OTHER 
AIRCRAFT 

Adding  the  AFTI/F-16  auto-recovery  systea  to 
existing  tactical  aircraft  should  require  only 
staple  modifications.  Each  type  aircraft  will  have 
a  unique  arrangeaent.  Three  general  coaponenta 
will  be  required: 

1.  Coaputer  -  The  purpose  of  the  coaputer 
will  be  to  take  Inputs  froa  various  aircraft 
coaponenta  (altitude,  attitude,  airspeed),  calcu¬ 
late  when  an  auto-recovery  Is  required,  and  send 
the  auto-recovery  conand  to  the  aircraft  coaponent 
that  will  fly  the  auto-recovery.  This  computer 
aust  have  the  necessary  Interfaces  with  other 
syateaa  and  Indicate  to  the  pilot  when  It  Is  not  in 
operation  through  aoae  bullt-ln-test  feature.  An 
exaaple  of  aircraft  computers  that  could  be  used 
are  the  F-15  central  coaputer,  or  the  F-16  Elec¬ 
tronic  Coaponent  Aaseably. 

2.  Autopilot  -  The  autopilot  portion  of  the 
systea  will  fly  the  maneuver  once  It  Is  commanded 
by  the  coaputer.  This  autopilot  aust  be  capable  of 
coaaandlng  up  to  5  g's  which  aay  require  Increasing 
the  authority  of  existing  autopilots. 

3.  Pilot  Vehicle  Interface  -  The  capability 
to  enter  the  floor  altitude,  arm  the  auto-recovery 
systea,  and  blend  with  or  disengage  the  auto¬ 
recovery  will  be  required.  In  addition,  each 
aircraft  will  have  its  unique  aethod  to  give  audio 
and  visual  Indications  of  system  operation. 


Plans  for  a  follow-on  to  the  current  AMAS 
program  on  the  AFTI/F-16  Include  development  of  a 
fully  Integrated  terrain  following  and  terrain 
avoidance  (TF/TA)  systea.  The  TF/TA  systea  will 
use  active  ACL  sensors  In  combination  with  a 
digital  terrain  data  base  and  digital  asp  for 
accurate  positioning  In  three  dimensions.  This 
trill  allow  the  auto-recovery  systea  to  Incorporate 
a  true  ACL  capability  and  Include  autoaatlc  oper¬ 
ation  with  the  gear  up,  and  altitude  warnings  with 
the  gear  down.  An  Increased  coaand  authority  will 
also  be  given  allowing  recoveries  at  7  or  even  9 

CONCLUSIONS 

Unlike  pregraas  being  pursued  to  find  a 
suitable  physiological  sensor  of  loss-of- 
consclouaness ,  an  auto-recovery  system  based  upon 
aircraft  altitude,  attitude,  and  airspeed  in 
relation  to  a  set  recovery  altitude  Is  applicable 
to  aost  cases  of  spatial  disorientation  and  loss- 
of-consclousness .  The  AFTI/F-16  auto-recovery 
system  is  based  upon  a  pilot-selected  MSL  altitude 
floor  and  la  operational  today.  This  systea  should 
be  Incorporated  Into  current  tactical  aircraft  as 
soon  as  possible. 

As  long  as  systea  operation  Is  Indicated  to 
the  pilot,  the  auto-recovery  systea  need  not  be 
redundant  or  require  extensive  aircraft  aodlflca- 
tions.  When  incorporated  on  a  tactical  aircraft, 
the  systea  will  use  a  coaputer  to  determine  when 
the  auto-recovery  la  required,  an  autopilot  to  fly 
the  recovery,  and  an  appropriate  pilot  vehicle 
Interface. 

Future  auto-recovery  systems  should  be  devel¬ 
oped  to  uae  ACL  altitude  which  will  provide  auto¬ 
matic  operation,  increased  authority,  and  coabat 
capabilities. 
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ABVTBACT 

Tho  AFTI/F-1E  testbed  is  being  uaed  os  o  systems 
prototype  for  the  Automated  Maneuvering  Attack  System 
(AMAS)  sad  associated  technology  relevant  to  combat 
automation.  The  developments  have  focused  on  improv¬ 
ing  terminal  weapon  delivery  and  survivability  in  a  low- 
cost,  operationally  suitable  configuration.  Realistic 
flight  demonstration  is  a  critical  element  in  the  process 
of  accelerating  the  maturation  of  advanced,  high-risk, 
fighter  technology.  The  testbed  aircraft  is  currently 
demonstrating  the  advanced  combat  capabilities  that  a 
highly  automated  and  integrated  weapon  system  can 
provide.  By  testing  in  an  operationally  relevant  flight 
envelope,  this  integrated  systems  demonstration  ittsssas 
all  aspects  of  technologies  being  evaluated,  ineluding 
important  functional,  packaging  and  safety-related  issues 
not  addressed  in  analytical  or  simulation  evaluations. 
The  interim  results  of  the  flight  test  program  are 
examined  in  terms  of  their  operational  and  technological 
implications.  Lessons  learned  and  their  meaning  to  other 
advanced  development  programs  and  the  technology 
transfer  process  to  operational  weapon  systems  are 
discussed. 


INTRODUCTION 

The  irn/I-H  Program  was  conceived  to  move 
advanced  technology  from  the  laboratory  to  the  opera¬ 
tional  Air  Force.  Systems  prototyping  wu  viewed  as  an 
effective  means  for  flight  demonstrating  the  transition 
potential  of  high-risk,  high  pay-off  technology  and 
concepts.  That  viewpoint  is  shared  by  the  recent  Pickard 
Blue  Ribbon  Commie* ion  (Reference  1)< 


The  APTI/P-1S  testbed  has  provided  simultaneous 
focus  on  the  multiple  objectives  of  systems  prototyping, 
diseipUns  oriented  subsystem  technology  development, 
end  integration  os  a  technology.  Prototype  hardware, 
together  with  working  software,  provides  conclusive 
demonstration  of  technology  readiness  to  meet  opera¬ 
tional  system  requirements.  Such  rendlnera  was  demon¬ 
strated  during  tho  first  phase  of  the  program,  the  Digital 
Flight  Control  System  (DFC3)  Phase.  A  fault  tolerant, 
task  tailored  flight  control  system,  designed  to  support 
the  flight  reseurch  objectives  of  that  phase  (advanced 
aoatroi  laws  and  decoupled  flight-path  control),  was 
matured  and  moat  of  the  technology  transitioned  into  the 
P-lf  C/D  production  digital  flight  control  system.  Full 
Soalu  Development  (PSD)  is  proceeding  et  half  the  cost  of 
the  prototype  AFTJ/F-1S  systems  directly  due  to 
traneitionabi*  hardware  and  software  technology. 

The  DFCS  development  has  also  provided  the  core 
technology  for  providing  the  flight-path  control  needed  in 
this  sacond  program  phase,  the  Automated  Maneuvering 
Attack  System  Plus*.  The  flight  ter*  'ver  250 
AFTVF-15  missions  have  produced  a  DFCS 

baseline  that,  when  combined  wn  e  D-1S53 

distributed  avionics  suite,  permits  the  inn  .at ion  of 

a  variety  of  automated  functions.  Th*  'S  Phase 
demonstrates  new  weapon  delivery  cepeb>.  tabled 
by  extensive  system  integration  of  the  flight,  i.  end 
weapon  control  functions  (Figure  1).  Specific  operations* 
goals  include*  (1)  eir-to-surfsce,  low-altitude,  curvilinear 
bombing  (opens  the  attack  arena  to  lateral,  high-g 
maneuvers),  and  (2)  air-to-eir,  ell -aspect  gunnery  (opens 
the  attack  arena  to  front-quarter  end  high,  angle-off 
geometries). 


"A  high  priority  should  be  given  to  building  and 
testing  prototype  systems  and  subsystems  before 
proceeding  with  full-scale  development....It  should 
demonstrate  that  the  new  technology  under  test  can 
sub*  tent  lolly  improve  military  capability,  and  should,  as 
well,  provide  a  basis  for  making  realistic  cost  estimates 
prior  to  a  full-scale  development  decision.” 
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BASS  FOR  FORECAST 

inherent  fighter  agility,  combined  with  the 
flexibility  and  precision  control  of  e  digital  flight-control 
system,  allows  for  new  dimensions  of  maneuverability  for 
engaging  and  destroying  the  enemy.  By  taking  advantage 
of  the  digital  system  processing  of  th*  modern  fighter. 
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•  AUTOMATED  MANEUVERING 
ATTACK  SYSTEM  (AMAS) 

—  Integrated  Ftlglrt/Flr*  Control 
—  System- Wide  Integrity  Mgt 
—  Conformal  IR/Laaar  Sensor  Tracker 
—  Auto  Sensor  Manager 
—  Collision  Avoidance  (A-S  A  A-A) 


Figure  1  AFTI/F-18  Technology  Integration 


the  opportunity  now  exists  to  enable  high-gain,  auto¬ 
maton  control  tasks  that  havo  previously  boon  im¬ 
practical  to  Implement,  such  as  the  AMAS  low-altitude 
curvilinear  bombing  and  all-aspect,  air-to-air  gunnery. 


The  design  premise  of  the  AFTI/F-H  AMAS  is  that 
flight-path  control,  with  attendant  safety  functions,  is 
central  to  the  accomplishment  of  the  tactical  mission, 
and  that  system  integration  and  automation  should 
pro  peseta  from  this  central  task.  The  attack  geometries 
provided  by  this  high  level  of  system  integration  provide 
the  flexibility  that  is  essential  for  sustaining  a  tactical 
advantage  for  our  future  fighters.  Our  observation  is 
corroborated  in  Inference  2t 

"Computer  technology  makes  it  possible  to  develop 
dynamic,  integrated,  and  comprehensive  automated 
systems  for  future  combat  aircraft.  A  systems  approach, 


emphasising  the  core  function  of  flight  trajectory  and 
attitude  control,  is  a  logical  and  necessary  starting 
point.” 

AMAS  flight-path  control  not  only  opens  new, 
attack  geometries  otherwise  unachievable  within  the 
bandwidth  of  pilot- in- the- loop  flight-path  control,  but  it 
is  a  continuous  and  central  function,  which  when  auto¬ 
mated,  can  enhance  safe  mission  accomplishment.  The 
weapon-dollvery  timeline,  as  shown  in  Figure  2,  has  both 
discrete  and  continuous  tasks.  As  the  cockpit  task 
transitions  from  target  acq-..Ztion  to  weapon  delivery, 
the  intensity  of  flight-path  control  increases,  requiring 
increased  pilot  attention,  competing  with  essential  pilot 
tasks  associated  with  the  operation  of  attack  sensors, 
weapons,  and  threat  countermeasures.  The  automation  of 
the  flight-path  control  provides  a  means  for  reducing 
workload,  thus  freeing  the  pilot  to  devote  more  time  to 
attack  execution  and  threat  management  tasks. 


callty  of  coupled  weapon  deliveries  were  examined  in 
terms  that  would  increase  the  transition  potential  by 
addressing  issues  of  safety  and  pilot  acceptability. 
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Figure  2  Critical  Functions  of  the  Attack  Phase 


IMPLEMENTATION 

The  AMAS  program  has  focused  on  developing  and 
flight  validating  a  design  that  is  practical  in  terms  of 
performance,  cost,  and  operability,  particularly  safety. 
The  AMAS  configuration  includes  a  prototype  low-coct 
sensor/tracker  system  (FLIR/laser)  specifically  developed 
for  the  AMAS  demonstration.  The  remainder  of  the  beaic 
AMAS  functions  are  in  Operational  Flight  Programs 
(OFP*s)  resident  in  P-16,  Block  2S  processors  integrated 
with  the  Phase  I  DFC3.  Ancillary  program  objectives 
include  the  evaluation  of  the  digital-terrain  system,  the 
interactive  voice  system,  and  automated  weapon  fuzing. 

The  AMAS  capabilities  are  primarily  software- 
driven  within  the  distributed,  asynchronously  operated 
M1L-STD-15S3  network  of  processors.  Major  software 
functions  include  guidance  and  control,  the  sensor 
manager,  and  the  System-Wide  Integrity  Management. 
Through  a  system-integration  approach,  functional 
redundancy  provides  the  safety  needed  for  demonstrating 
AMAS  operation  in  the  chosen  attack  arenas  without 
resorting  to  a  duplication  of  avionics  processors. 

The  AFTI/F-16  systems  engineering  has  clearly 
weighed  the  integrated  systems  objectives  against  the 
compromise  of  the  airframe  performance.  While  devel¬ 
oping  the  technology  that  allows  the  pilot  to  engage  the 
enemy  more  freely  in  three  dimensions,  the  equipments 
required  to  enable  the  new  attack  functions  were 
designed  for  minimum  impact  to  the  operational  speed 
and  range  of  the  basic  P-16.  At  the  same  time,  the  DFC3 
provides  a  more  agile  control  system  than  the  baseline 
P-16,  and  the  AMAS  opens  attack  geometries  not  possible 
without  closed-loop  control  provided  through  the  attack 
sensor. 


Operational  relevance  is  being  measured  in  the 
ability  to  deliver  conventional,  unguided  ordnance  that  is 
prevalent  in  today's  tactical  operations.  Delivery  of 
these  weapons,  which  requires  precision  trajectory  con¬ 
trol,  presents  the  most  restrictive  requirement;  technical 
solutions  to  this  challenge  are  readily  applied  to  other 
trajectory  control  tasks  requiring  lesser  precision.  But  a 
more  overriding  consideration  for  using  unguided 
ordnanee  stems  from  the  reality  that  our  tactical  forces 
have  large  Inventories  of  these  low-cost  conventional 
weapons.  Improvements  to  the  delivery  of  these  weapons 
would  have  very  significant  benefits  to  combat  readiness 
and  mission  effectiveness. 

The  single-seat  configuration  was  chosen  for  several 
reasons.  First,  this  is  the  cockpit  configuration  where 
higher  payoffs  could  result  from  automation,  and 
specification  of  this  configuration  would  steer  the  design 
process  to  single-seat  workload  issues.  Second,  the  post- 
Vietnam  trend  in  fighters  is  clearly  toward  the  single¬ 
seat  fighter,  driven  primarily  by  a  force  strength 
consideration  to  lower  personnel  and  training  costs. 
Additionally,  weapon  system  coat  reduction  and  airframe 
performance  benefits  can  be  gained  by  eliminating  the 
second  seat.  Though  a  second  cockpit  was  considered  for 
safety  reasons,  it  was  ruled  out  due  to  the  potential 
corruption  to  single-seat  automation  goals. 

The  approach  that  has  been  taken  in  the  AMAS 
cockpit  development  is  to  leave  the  pilot  acquisition  task 
as  a  semi-automated  function,  but  provide  workload 
alleviation  via  automated  flight-path  control.  Although 
research  continues  in  the  field  of  automatic  target 
acquisition  methods,  progression  or  break-throughs  are 
not  apparent  to  indicate  that  significant  workload 
reduction  can  be  achieved  through  this  automation 
approach  in  the  forseeable  future.  It  is  our  contention 
that  the  target  acquisition  task  in  the  tactical  fighter 
will  likely  always  rely  heavily  on  the  perceptual  and 
interpretive  skills  of  the  pilot,  due  to  the  variability  and 
changing  nature  of  the  tactical  battlefield. 

Similarly,  the  AMAS  demonstration  has  made  no 
attempt  to  integrate  active  threat  management  or 
automatic  evasion  into  the  system.  In  the  low  altitude 
attack  profile,  a  passive  approach  has  been  taken,  that  is. 
to  avoid  and  evade  threats  by  using  a  turning  weapon 
delivery  to  defeat  threat  acquisition  and  tracking,  as  well 
as  to  provide  standoff  from  the  target.  The  flight  control 
system  and  trajectory  control  algorithms  are  designed  to 
allow  pilot  blending  for  jinking  and  evasive  maneuvers,  if 
needed. 


The  AMAS  research  has  emphasised  operationally  KET  RESULTS 

relevant  flight  envelopes  in  both  the  air-to-surface  and 

air-to-air  fighter  arenas.  The  low-altitude  bombing  sys-  The  AMAS  flight  testing  is  now  producing  the 

tern  was  developed  to  operate  at  S.S  g*s  as  low  as  200— ft  desired  results  in  air-to-surface  operations,  demon- 
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Weapoa  Delivery  •  Curvilinear  Bombing 

Today's  weapon  delivary  mat  hods  ara  d  aligned  for  a 
wings- level  release  (level,  dive,  loft)  in  a  vertical  plane. 
Most  methods  require  a  linear  flight  path  during  final 
delivery  that  presents  a  predictable  flight  path  to  the 
enemy  threat  systems.  Sight  depression  angles  needed 
for  accurate  radar  ranging  for  visual  delivery  require 
close-in  delivery  methods.  The  combination  of  these 
factors  pose  a  very  severe  threat  to  the  survivability  of 
our  fighters  when  attacking  a  well  defended  target. 

The  AMAS  bombing  system,  which  ailowi  precision 
weapon  delivery  while  maneuvering  at  4  to  S  g*s  at  very 
low  altitude,  provides  substantial  survivability  benefits. 
First,  the  system's  high  degree  of  maneuvering  freedom 
greatly  decreases  vulnerability  to  terminal  gun  threats  by 
eliminating  linear  flight-path  segments.  Second,  the 
sensor/tracker  system  provides  precision  target-state 
measurements  at  very  low-grazing  angles,  allowing  low- 
drag  weapons  to  be  accurately  delivered  from  lower 
altitudes  and  greater  standoff  ranges.  This  combination 
of  maneuverability  and  standoff  allows  the  pilot  to  avoid 
target  over-flight,  turning  inside  the  target's  point 
defenses  and  the  bomb  fragmentation  envelope.  This 
feature  is  also  key  to  the  ability  to  deliver  low-drag 
weapons  under  low  ceilings,  another  significant  payoff  of 
curvilinear  bombing. 

End-to-end  fully  automatic  system  operation  has 
been  demonstrated  at  SQO-ft  ACL.  The  remaining  tasks 
are  the  weapon  accuracy  and  tactical  evaluations,  which 
include  a  demonstration  at  200-ft  AGL.  Given  the 
anticipated  suecesa,  the  AMAS  curvilinear  bombing 
technology  is  judged  ready  for  transition.  The  sensor/ 
tracker,  fire-control  guidance,  and  flight  controls  will 
have  been  demonstrated  in  a  very  relevant  operational 
flight  envelope.  Although  the  AMAS  was  designed  for  the 
flat-earth  test  environment,  the  curvilinear  bombing 
capability  could  be  implemented  using  a  selectable 
minimum  descent  altitude  based  on  the  local  terrain. 

The  AFTI/F-16  sensor/tracker  system  offers  a  very 
versatile  design  for  follow-on  development,  either  in  its 
current  multifunctional  configuration  or  to  other  electro- 
optical  applications  requiring  precision  tracking.  Two 
design  requirements  have  resulted  in  an  attractive 
baseline  design:  (l)  the  low-drag  requirement  to  mini¬ 
mize  aerodynamic  penalty,  and  (2)  the  multirole  tracker 
requirement.  The  combination  of  these  factors  has 
resulted  in  a  successful  design  that  is  efficiently 
packaged  and  optimally  integrated,  with  growth  potential 
to  operational  systems  that  are  flexible,  maintainable, 
and  low-cost.  Test  results  indicate  that  the  overall 
design  is  sound,  particularly  in  the  turret  stabilization 
and  laser  boresight.  The  common  aperature,  coaxial  laser 
output  provides  for  better  spot-aiming  and  stabilization 
on  the  target.  The  wing-strake  position  is  also  advan¬ 
tageous  because  it  allows  for  much  latitude  in  maneu¬ 
vering  during  target  designation.  While  performance  has 
been  adequate  for  basic  AMAS  bombing  guidance,  the 
video  imaging  and  tracking  performance  was  less  than  our 
specification  goals.  Areas  of  emphasis  indicated  for  full- 
scale  development  would  be  optimization  of  the  optical 
train,  FUR  detector,  and  digital  scan  converter. 


Target  Acquisition 

Target  acquisition  consists  of  three  tasks:  detection 
(sensing)  of  possible  targets,  selection  of  a  probable 
target  from  the  candidates,  and  designation  of  this  target 
to  the  fire-control  system.  The  task  must  be  completed 
quickly,  under  the  stress  of  enemy  threats,  while  making 
sense  of  available,  and  unavailable  information.  In  the 
multisensor  aircraft,  this  is  an  extremely  complex  task 
that  requires  mental  agility  and  manual  dexterity  as  the 
pilot  operates  and  switches  between  sensors,  each  with 
its  unique  operation  and  frame  of  reference.  At  the  same 
time,  the  tasks  of  flight-path  control,  attack  planning, 
and  threat  management  compete  with  target  acquisition. 
The  proximity  to  the  earth  (Pk*100%)  in  the  low-altitude 
arena  places  significant  demands  on  the  pilot  for  flight- 
path  control. 

While  the  AMAS  implements  several  automated 
target-acquisition  features,  the  pilot  is  viewed  as  the  key 
integrating  factor  for  the  target-acquisition  task.  The 
pilot's  vision  comes  into  play  in  two  ways:  (1)  in  the 
direct  out-of-the-canopy  target  acquisition,  and  (2)  in  the 
scanning  and  Interpretation  of  the  cockpit  displays.  The 
AMAS-configuration  incorporates  a  baseline  sensor  suite 
typical  of  the  modern  fighter:  the  fire-control  radar,  the 
inertial  navigation  system,  a  targeting  sensor  (FL1R),  and 
head-up  display.  A  sensor  manager  is  implemented  to 
assist  in  sensor  cueing  and  switching.  For  the  air-to-air 
task,  the  sensor- manager  function  introduces  the  fusion 
of  radar  and  sensor/tracker  data.  For  air-to-surface 
operation,  the  sensor  manager  cues  to  inertial  locations. 
The  inertial  estimate  of  the  aircraft's  present  position  is 
refined  by  the  Sandia  Inertial  Terrain-Aided  Navigation 
(STAN)  mechanization  in  the  digital-terrain  system. 
This  enables  target  acquisition  with  the  sensor/tracker 
without  a  position  update  via  radar  or  visual  flxpoint 
overflight. 

The  AMAS  cockpit  configuration  also  incorporates  a 
helmet- mounted  sight  and  an  interactive  voice  system  to 
assist  the  pilot  in  target  acquisition.  The  helmet- 
mounted  sight  is  incorporated  to  provide  rapid  off-axis 
cueing  of  attack  sensors,  and  the  voice  system  is 
integrated  with  the  sensors  and  displays  to  evaluate  its 
utility  during  target  acquisition.  The  testing  of  these  two 
subsystems  has  not  progressed  to  the  evaluation  phase; 
test  results  are  preliminary  or  unavailable  and  do  not 
support  any  further  discussion  or  conclusions  at  this  time. 

In  the  air-to-surface  environment,  the  AMAS 
cockpit  design  has  thus  far  not  resulted  in  any  workload 
reduction  during  sensor  operation.  The  high  workload  can 
be  attributed  to  cockpit  mechanization  immaturity, 
marginal  sensor/tracker  video,  tracker  operation,  and 
system  interface  problems  associated  with  working  at  low 
altitudes  and  low-grazing  angles.  However,  our  flight 
tests  have  proven  an  extremely  important  point.  With  the 
availability  of  a  fail-safe,  low-altitude  autopilot  and 
automated  steering  to  the  target,  the  AFTI/F-1S  pilots 
have  had  the  time  to  focus  most  of  their  attention  on  the 
high- workload,  target-acquisition  task.  Because  of  this 
flight-path  automation,  with  its  fault-tolerant,  triplex- 
redundant,  collision  avoidance  function,  the  net  effect  is 
a  higher  probability  of  success  in  acquiring  the  target. 


Weapoa  Integration  •  Automated  Weapon  Fusing 

Tha  A  MAS  configuration  includes  a  MIL-STD-1760 
digital  interface  that  provides  a  real-time  (IS  Hz) 
communication  from  the  fire-control  computer  to  the 
prototype  Standard  Avionics  integrated  Fuze  (SAIF).  This 
fuze  is  installed  on  a  Tactical  Munition  Dispenser  (TMD), 
a  canister-type  weapon  loaded  with  inert  submunitions 
for  the  AMAS  demonstrations.  The  test  objective  is  to 
demonstrate  the  capability  to  accurately  deliver  a  two- 
stage  ballistic  weapon,  such  as  the  TMD,  while  the 
aircraft  is  free  to  maneuver  and  change  delivery  air¬ 
speed.  Currently,  such  weapons  must  be  delivered  from 
fixed  airspeed/ alt i t udes,  or  be  equipped  with  a  more 
expensive  proximity  fuze,  in  order  to  obtain  proper 
pattern  control. 

The  SAIF  integration  with  the  AFTI/F-16  has  been 
demonstrated  in  the  simulator.  Four  TMD  weapon  deliv¬ 
eries  are  scheduled  during  the  AMAS  bombing  demon¬ 
strations.  Given  a  successful  demonstration,  the  fuze  is 
scheduled  to  enter  full-scale  development.  For  aircraft 
equipped  with  a  MIL-STD-1780  weapon  interface,  the 
TMD/SA1F  can  be  delivered  using  any  of  the  currently 
operational  fire-control/ weapon  delivery  methods 
programmed  with  two-stage  ballistic  algorithms. 

One  payoff  complementary  to  the  AMAS  bombing 
fire-control  guidance  is  the  ability  to  accurately  deliver 
the  TMD/SAIF  by  using  any  of  the  available  attack 
profiles,  giving  increased  survivability  during  the  attack. 
For  example,  AMAS  can  be  used  to  deliver  a  TMD/SAIF 
in  a  turning,  loft  maneuver.  A  second  capability  is  that 
of  changing  the  desired  submunition  impact  patterns  from 
the  cockpit  rather  then  being  stuck  with  preset  param¬ 
eters.  As  part  of  the  AMAS  demonstration,  optimal 
pattern  control  will  be  changed  during  the  attack  using 
the  voice  interface  to  identify  the  target  type,  e.g., 
"tanks",  "trucks",  or  "troopa."  A  third,  very  pervasive 
capability  enabled  by  the  TMD/SAIF  and  digital-terrain 
system  is  a  "blind"  weapon  delivery  using  passive  ranging. 
Using  the  SIT  AN  for  accurate  position  updates,  and  an 
algorithm  for  automatic  system  altitude  calibration,  the 
weapon  could  be  delivered  on  known  target  locations 
(pre-planned  or  data-linked)  without  the  aid  of  any  active 
target  sensor. 


Situational  Awareness 

No  precise  definition  of  "situational  awareness" 
exists,  but  in  essence  this  refers  to  the  availability  and 
assimilation  of  information  or  data  needed  by  the  pilot  to 
conduct  the  mission  and  constantly  assess  alternative 
actions.  The  availability  of  data  on  the  target(s),  threat, 
terrain,  own-state,  and  friendly  forces  is  very  critical. 
Modern  fighters,  typically,  are  limited  in  the  availability 
of  needed  data,  and  data  that  are  available  tend  to  be 
uncorrelated.  Mueh  of  the  data  consist  of  manually 
prepared  products,  and  inflight  updates  are  generally 
accomplished  through  voice  communications.  The  advent 
of  dense  digital  storage  media  and  data  links  are  starting 
to  correct  this  deficiency. 

The  AFTl/F-18  digital-terrain  system  development 
marks  a  major  aviation  advancement  by  providing  a 
means  for  storing  massive  data  that  is  displayed  in  a 
correlated  manner  in  three-dimensional  terrain  scenes. 


The  availability  of  a  real-time,  color  moving-terrain  map 
allows  instantaneous  situational  awareness  of  the  pilot's 
own-state  position  relative  to  terrain,  targets,  threats, 
surface  features,  control  zones,  and  other  tactical 
descriptors. 

The  digital-terrain  system  has  been  functionally 
demonstrated  in  the  flight  environment.  Tactical 
evaluations  are  planned,  but  are  on  hold  pending  the 
installation  of  a  brighter  color  tube  in  the  cockpit 
display.  In  simulator  demonstrations,  the  utility  of  the 
terrain  display  has  been  demonstrated  for  terrain  and 
threat  avoidance.  Threat  locations  and  status  are 
displayed  on  the  Tactical  Situation  Display  (TSD)  in  a 
planform  navigation  scene.  Variable  sized  circles  can 
indicate  the  approximate  threat  radius  of  lethality. 
Terrain  at  or  above  the  aircraft  altitude  can  be 
highlighted,  which  is  useful  for  threat  avoidance  and 
evasion.  This  capability  provides  a  first-order  approxi¬ 
mation  of  threat  intervisibility  displays  of  the  future. 

Safety 

The  program  goal  to  operate  the  AMAS  system  as 
low  as  200-ft  AGL  presented  significant  design  challenges 
with  respect  to  safety.  An  integration  concept  labeled 
System-Wide  Integrity  Management  (SWIM),  evolved  to 
provide  a  "safety  net  under  the  system."  Using  redundant, 
logical  processing  embedded  in  the  digital  flight-control 
system,  a  combination  of  single-thread,  computation 
monitoring,  sensor  comparison  monitoring,  and  redundant 
computation  of  imminent  ground  collision  has  been 
mechanized  to  run  as  a  background,  flight-control  task 
during  automated  attack.  This  pioneering  effort  in  the 
extension  of  flight-control  safety  engineering  to  avionic 
processing  is  a  direct  result  of  interdisciplinary  func¬ 
tional  integration  of  flight  control  and  avionic  design 
technology.  The  protection  afforded  by  flight-control 
redundancy  can  be  deeply  propagated  in  an  integrated, 
networked  system.  For  the  current  AMAS  system,  SWIM 
is  mechanized  to  provide  protection  against  ground 
collision  while  operating  over  flat  terrain;  however,  the 
concepts  are  extensible  to  operation  in  rough  terrain 
through  integration  with  the  digital-terrain  system. 

One  key  result  of  our  testing  has  been  the  pilots' 
confidence  in  the  safety  features  of  the  AMAS.  During 
high-workload  tasks  associated  with  sensor  management 
during  target  acquisition,  the  pilots  had  sufficient 
confidence  in  the  low-altitude  autopilot  and  ground- 
collision-avoidance  systems  to  accomplish  the  weapon 
deliveries  under  totally  automatic  flight-path  control. 
The  flight-path  control  fully  compensated  for  the  level  of 
cognitive  tasks  during  acquisition.  During  weapon 
delivery,  the  time  when  the  task  load  increases  with 
manual  control,  the  AMAS  has  demonstrated  reduced 
workload.  We  believe  that  this  same  degree  of  workload 
will  be  experienced  in  the  combat  environment,  and  that 
our  flight  tests  are  demonstrating  that  automated,  flight- 
path  control,  combined  with  the  other  AMAS  features, 
will  permit  the  single-seat  pilot  to  effectively  accomplish 
his  mission  in  a  high-threat  environment. 


OPERATIONAL  IMPLICATIONS 

The  flight  test  results  of  the  AFTI/F-16  AMAS 
Phase  clearly  validate  that  the  flight-path  control  func- 


tlon  cin  provide  the  core  building  block  for  compre¬ 
hensive  system  integration  and  automation.  Today's 
fighters  are  integrated  around  the  manual  flying  task, 
placing  a  high  premium  on  the  simultaneous  accomplish¬ 
ment  of  flight-path  control,  target  acquisition,  weapon 
delivery,  and  threat  management.  AMAS,  the  antithesis 
to  this  traditional  approach,  flies  the  aircraft  to  a 
precision  weapon  release,  giving  the  pilot  more  time  to 
effectively  work  the  target  acquisition  and  threat- 
management  tasks.  The  test  results  have  demonstrated 
that  the  AMAS  combat  automation  is  technologically 
ready  for  transition  today  and  provides  a  real-world 
capability  usable  by  the  pilot.  While  no  forum  exists  to 
define  automation  policy,  our  results  define  the  basis  for 
subetMtial  chMge  in  tactical  fighter,  combat 
automation. 

The  introduction  of  new  automation  into  combat 
aircraft  has  generally  required  that  two  factors  be 
satisfied:  (1)  overcoming  senior  mMagement  concern 
about  increased  cost  and  complexity  of  automation,  and 
the  potential  for  its  unreliability,  and  (2)  gaining  operator 
acceptance,  often  in  the  face  of  "show  me"  and  "white 
scarf*  attitudes.  The  AMAS  combat  automation  demon¬ 
stration  has  provided  the  opportunity  to  look  at  these 
issues. 

The  AMAS  flight  validation  has  provided  an 
extremely  importMt  cost  and  reliability  baseline  for 
future  weapon  system  modifications  or  developments. 
The  experience  gained  in  implementing  the  AFT1/F-18 
with  emphasis  both  to  operability  and  safety,  is  not  unlike 
that  of  an  PSD  development.  Because  of  the  functional 
redundancy  approach  that  was  the  network  of  embedded, 
single-thread  avionics,  the  system  development  was  com¬ 
plex,  leading  to  a  higher-thM-expected,  non-recurring 
development  cost.  However,  the  task  was  accomplished, 
and  the  technical  approach  has  been  very  successful  in 
producing  a  reliable,  software-intensive  configuration 
that  avoids  recurring  hardware  costs  and  airframe 
penalties  associated  with  hardware  redundancy.  A  func¬ 
tioning  software-support  environment  has  been  defined, 
and  all  safety-of-flight  test  goals  have  been  met  in  an 
aggressive  flight-demonstration  program. 

The  AMAS  demonstration  has  also  provided  a 
critical,  operationally  relevant  evaluation  by  the 
operators,  and  the  pilots,  that  is  essential  to  fielding  such 
automation  concepts.  There  is  precedence  for  the  accep¬ 
tance  of  the  automation  of  functions  that  humans  cannot 
perform,  that  compete  with  critical  tasks,  or  that  can  be 
more  reliably  performed  through  automation.  The  AMAS 
testing  has  clearly  demonstrated  the  benefits  that  flight- 
path  automation  provides  to  mission  accomplishment, 
survivability,  and  safety  during  target  acquisition  and 
weapon  delivery.  We  are  confident  that  the  AMAS 
demonstration  has  provided  the  key  to  this  critical 
acceptance. 

There  is  no  doubt  that  AMAS  capabilities  signal  a 
changing  pilot  role  in  the  cockpit.  These  capabilities 
have  not  been  effected  with  any  thought  of  displacing  the 
human  pilot  from  the  cockpit.  In  fact,  quite  the  opposite 
is  true.  The  implication  of  AMAS  technology  is  that  the 
effectiveness  of  the  pilot  is  enhanced  through  flight-path 
automation  and  will  sustain  the  viability  of  piloted 
aircraft  in  the  tactical  missions  of  the  future.  The 
flight-path  automation  that  brings  these  new  dimensions 
to  attack  maneuverability  aiso  can  oe  used  to  allow  the 


pilot  to  devote  attention  to  tasks  that  are  dependent  on 
the  human  operator.  This  is  especially  importMt  for 
successful  mission  accomplishment  using  a  single-seat, 
multisensor  configuration  designed  to  operate  around- 
the-clock  Md  in  marginal  weather  conditions.  The 
authors  contend  that  the  humM  pilot's  perceptual  and 
interpretive  skills  are  better  utilized  for  target  acqui¬ 
sition  and  threat  management.  Althougn  a  number  of 
advMced  development  programs  are  working  to  automate 
these  functions,  the  technology  and  integration  that 
supports  full  automation  of  these  largely  cognitive  tasks 
has  not  emerged. 

Given  the  acceptMce  of  automated  weapon 
delivery,  this  has  importMt  implications  to  the  opera¬ 
tional  sensor  and  weapon  configurations.  The  perform - 
mcs  of  the  AMAS  bombing  system  depends  critically  on 
the  proper  system  integration  of  the  three  enabling 
subsystems:  the  conformal  sensor/tracker  system  (meas¬ 
urement  of  target  state),  the  fire-control  computer 
(guidMce  command),  and  the  flight-control  system 
(closed-loop  flight-path  control).  However,  with  the 
sensor/tracker  now  directly  controlling  the  aircraft,  the 
systems  integration  must  be  approached  from  a  "built-in" 
rather  ihM  a  "bolted-on"  engineering  frame  of  mind.  The 
implication  is  that  the  overall  weapon  system  integration 
would  proceed  from  a  functional  design,  with  the 
sensor/tracker  integrally  designed  into  the  system. 

Perhaps  the  most  important  consideration  for 
implementing  the  AMAS  bombing  system  is  the  sensor 
airframe  installation.  It  is  absolutely  essential  that  the 
sensor  installation  allow  upiook  to  the  target  while 
maneuver!  g  at  bank  angles  of  90  degrees  or  more.  This 
was  the  primary  consideration  in  the  selection  of  the 
wing-strake  position  for  the  AFTI/P-18  (other  consid¬ 
erations  were  low,  aerodynamic  drag  and  structural 
rigidity).  Belly,  inlet,  Md  missile-well  mounted  sensors 
all  tend  to  limit  the  bank  that  is  achievable  due  to 
fuselage  interference  to  the  target  line-of-signt;  hence, 
these  sensor  restrictions  severely  limit  the  maneuver 
envelope  during  the  attack  phase. 

The  AMAS-SAIF  integration  has  provided  an 
importMt  look  at  the  payoffs  achievable  by  comple¬ 
mentary,  advanced,  aircraft  and  weapon  integration. 
During  the  course  of  the  AMAS  program,  we  have  aiso 
studied  a  number  of  other  promising  integrated  weapon 
concepts.  The  availability  of  a  communications  1  in k 
between  the  weapons  and  the  aircraft  avionics  provides 
the  ability  to  initialize  a  weapon  before  .aunch  with  a 
variety  of  readily  available  aircraft  data.  This  MIL-STD- 
1780  interface  cm  enable  "smart"  aircraft/"smart" 
weapon  combinations  that  greatly  increase  weapon- 
system  effectiveness.  The  potential  also  --Tists  for 
significant  weapon  cost  saving?  by  *a*ing  advantage  of 
the  availability  of  aircraft  lata  and  eliminating 
unnecessary  functional  duplication  in  the  w»ap.-ns-of- 
state  data  that  can  be  shipped  at  weapon  release  rather 
than  autonomous  sensing  or  estimation  in  the  weapon 
guidance  and  warhead  packages. 

The  importance  of  the  on-board,  digital-terrain  data 
base  for  system  integration,  as  well  as  situational 
awareness  displays,  cannot  be  overstated.  Every  aspect 
of  the  low-altitude,  mission  flight-path  control,  target 
acquisition,  weapon  delivery,  threat  avoidance  -  s 
affected  by  the  topography  of  the  area.  The  availability 
of  an  on-board,  digital-terrain  data  base  provides  a 
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picture  of  the  world  not  available  through  any  combi¬ 
nation  of  sanaors.  Furthermore,  this  data  base  provides 
tha  physical  basalina  for  tha  registration  of  target, 
threat,  geographical,  and  tactical  data.  Because  of  the 
revolutionary  capabilities  that  the  digital-terrain  data 
base  can  provide,  our  recommended  roadmap  for  this 
technology  is  singled-out  in  the  final  section  of  this 
paper. 


TECHNOLOGICAL  IMPLICATIONS 

Integration  la  emerging  as  the  key  technology  in 
systems  prototyping.  Currently,  AFTI/F-16  AM  AS  is  the 
largeat-scale.  aircraft  integration  completed  by  the  Air 
Force  Wright  Aeronautical  Laboratories.  Most  of  the 
AFTl/F-H  integration  is  resident  in  software,  in  the 
accomplishment  of  the  AMAS  system  integration. 
General  Dynamics  has  matured  in  excess  of  SS,000  lines 
of  object  code  (not  including  vendor  subsystem  software), 
which  resides  in  five  major  subsystems.  The  scale  of  this 
activity  has  been  comparable  to  that  of  a  production 
program;  yet,  has  been  accomplished  within  the  resources 
and  philosophical  context  of  a  research  program.  Some 
of  the  lessons  learned  and  tha  developments  imple¬ 
mented,  as  a  result  of  these  experiences,  are  the  subject 
of  this  discussion. 

Software  production  has  been  a  limiting  factor  in 
the  development  of  new  capabilities  and  engineering 
changes  in  the  AMAS  program.  After  the  initia,  -eease 
of  an  OFP,  problem  disclosure  has  been  accomplished  in 
three  stages  (1)  code-oriented  test.  Computer  Program 
Test  A  Evaluation  (CPTAE),  (2)  stand-alone  test,  and  (3) 
integrated  system  teat.  The  process  has  been  frustrated 
at  each  stage  by  a  combination  of  slow- turnaround  for 
changes  and  insufficient  data  for  problem  diagnostics.  As 
a  basis  for  formulating  a  naw  change  approach,  we  have 
used,  as  a  referee  model,  the  development  of  software  by 
the  use  of  commercial  software  tools  and  test  equipment. 
Our  goal  is  to  provide  an  integrated,  system-development 
environment  which  reflects  the  commercial  state-of-the- 


ProdBctiow  of  Code  -  The  scale  of  change  and 
available  processors  have  dictated  a  combination  of 
assembly  (Z8001,  MIL-STD-L750  and  BDX-930)  and 
Higher-Order  Language  (HOD  (JOVIAL  J73  to 
Z800I  and  MIL-STD-1750)  programming.  Early  in 
the  program,  the  lack  of  vertically  integrated  tools, 
(i.e.,  a  compiler,  assembler,  linker  and  emulator) 
hosted  in  an  interactive  and  accessible  facility, 
greatly  retarded  the  development  for  the  HOL- 
implemented  software.  in  fact,  assembly- 
program  mad  patches  dominated  the  repair  process 
due  to  the  lack  of  efficient  code  development 
facilities.  The  introduction  of  a  vertically  inte¬ 
grated  tool  set,  which  includes  a  symbolic  debugger 
developed  at  General  Dynamics,  hosted  on  a 
MIcroVAX  1L,  raised  the  code  dev..„pment  process 
to  the  efficiency  limits  of  the  tools.  While  we 
achieved  a  significant  turnaround  improvement,  the 
preparation  of  a  load  module  may  still  require  as 
much  as  three  hours,  which  precludes  interactive 
debugging.  Even  at  the  current  status  of  the  tools, 
the  efficiency  of  the  vertically  integrated,  HOL- 
based  development  is  significant,  both  in  pro¬ 
grammer  productivity  and  in  error  reduction. 
Super- microcomputer  technology  has  reduced  the 


capital  requirements  for  embedded  software  devel¬ 
opment  by  more  than  an  order  of  magnitude.  We 
are  currently  performing  this  development  in  small 
teams,  which  ara  fully  facilltized  with  vertically 
integrated  tool  sets. 

Tha  introduction  of  tha  Ada  language  is  s 
significant  step  in  enabling  transportable  code,  but 
unless  tha  attendant  downstraam  link,  load  and  test 
interfaces  are  simultaneously  developed,  a  key 
element  of  the  development  chain  will  remain 
frustrating. 


Teat  -  It  is  not  difficult  to  justify  tha 
development  of  custom,  teat  facilities  for  pro¬ 
duction  systems  due  to  the  amortization  of  the  non¬ 
recurring  coats  over  a  significant  production  run. 
For  tha  AMAS  system  avionic  prototypes,  we  could 
not  justify  cloning  cost,  let  alone  the  development 
coct  of  the  required  facility.  This  brutal  fact 
forced  us  to  sandwich  into  production  facility 
schedules,  adapt  test  procedure  designed  for 
qualification,  not  prototyping,  and  subsequently 
spend  an  inordinate  amount  of  time  in  tha  stand¬ 
alone  teat  process. 

Until  recently,  commercial  test  equipment  for 
custom,  bit-slice  processor  MIL-STD-1750  com¬ 
puters  did  not  exist.  Our  perception  is  that  the 
small  military  market,  coupled  with  tha  tech¬ 
nologically  outpaced  MIL-STD-1750  processor,  has 
delayed  the  availability  of  low-coat,  test  equipment. 
That  equipment,  now  available  even  for  custom,  bit- 
slice  computers  has  enabled  a  re-thinking  of  test 
station  configurations.  We  have  integrated  a 
Tektronix  8540  with  the  Delco  M372  fire-control 
computer  to  provide  a  low-coat,  efficient  debugging 
interface.  Definition  has  begun  on  a  super- 
microcomputer  and  commercial-interface-based, 
stand-alone,  test  facility;  however,  it  is  work-in- 
progress. 

Integrated  System  Test  -  The  AFTI/F-16  hotbench 
simulator  facility  has  become  the  primary,  system- 
level  debug,  verification  and  validation  tool.  It  is  in 
thia  facility  that  we  are  currently  demonstrating 
the  larger  methodology  change. 

The  hotbench  has  two  development -evaluation 
modes:  first,  simulation  models  executed  on  mini¬ 
computers,  and  second,  hotbench  operation  using 
target  processors.  The  mini-computer  step  was 
necessitated  by  the  long  turnaround  cycle  for  trial, 
target  computer  software.  Development  facilities, 
which  are  compartmented  in  small,  vertically 
integrated  "nests",  are  now  networked  to  the 
simulation  facility.  On-line  debug  interfaces  are 
available  at  the  target  processor.  With  the  addition 
of  a  commercial  multiplex  bus  analyzer,  the  system 
is  simultaneously  observable  at  the  target 
processors),  bus  and  functional  system  level.  This 
facility  has  been  called  an  "instrumented  hotbench". 

Because  of  near-term  standardization  on  Ada  as 
both  an  embedded  software  and  a  simulation 
language,  the  role  of  the  mini-computer  as  an 
embedded  software  modeling  device  is  being 
challenged.  A  facility  as  defined  in  Figure  3. 
combined  with  a  rapidly  executing,  development. 
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Figure  3  imnuatid  Hotbeoch  Dmlapaoit  Systems 

tool  sot  eon  become  a  system-level,  intoractlvo 
debug  facility.  Automated,  stand-alone  facilitiaa 
art  embedded  and,  in  some  esses,  could  provide 
stand-alone  results  in  concert  with  the  operation  of 
targets.  A  facility  prototype  exists,  and  extension 
is  underway. 

The  fact  that  the  "instrumented  hotbench”  Is  nearly 
electrically  and  functionally  identical  to  the  testbed 
aircraft  could  justify  the  migration  of  test  pro¬ 
cedures  to  the  testbed.  At  this  time,  the  lack  of 
flight-line  interfaces  to  the  airborne  targets 
precludes  this  step. 

The  viability  of  the  adaptation  of  commercial,  test 
equipment  to  the  systems  prototype  process  has  led  us  to 
another  parallel  -  what  about  commercial  micro¬ 
processors?  The  fundamental  health  of  the  private  sector 
has  led  to  the  recent  introduction  of  five,  32-bit  super¬ 
microcomputers  with  military  application  potential. 
Commercial  microprocessors  combined  with  transport¬ 
able  Ada  code  should  solve  many  tool  and  test  availability 
problems.  These  chip  sets  are  fabricated  to  VHSIC  Phase 
I  line  rules  and  are  supported  with  commercial  test 
interfaces.  One  VHSIC  application  studied  for  the  Digital 
Terrain  Management  and  Display  System  (DTMDS), 
symbol-generator,  an  upgrade  to  a  VHSIC  MIL-STD-17S0 
offered  no  payoff,  not  because  of  VHSIC,  but  because  of 
16-bit  addressing  in  the  MIL-STD-1750A  processor. 

The  authors  contend  that  implementation  of  the 
Packard  Commission  findings  could  profitably  begin  with 
computers:  "rather  than  relying  on  excessively  rigid, 
military  specifications,  DoD  should  make  much  greater 
use  of  components,  systems,  and  services  available  ’off- 
the-shelf."  it  should  develop  new  or  custom-made  items 
only  when  it  has  been  established  that  those  readily 
available  are  clearly  inadequate  to  meet  military 
requirements". 

Our  integration  efforts  have  almost  paralleled 
subsystem  developments,  and  a  pattern  of  critical,  sub¬ 
system  deveiopment/integration  has  emerged.  The  pay¬ 
off  derivable  from  further  integration  on  the  testbed  is 
currently  at  the  highest  level  since  the  program  began, 
because  of  the  presence  of  the  onboard,  digital-terrain 
data  base.  That  potential  direction  is  the  subject  of  the 
next  section. 


RECOMMENDED  RAO  ROADMAP 

The  most  pervasive  follow-on  to  the  AFTl/F-16 
AMAS  research  ’*  the  extension  of  the  air-to-surface 
capabilities  to  .erailzed  topography  to  take  advantage 
of  terrain  masking  during  weapon  delivery.  This  would 
allow  the  pilot  to  stay  lower  by  ingressing,  engaging  the 
target,  and  egresalng  below  the  localized,  minimum, 
enroute  altitude.  The  current  AMAS  system  can  be 
employed  in  hilly  or  mountainous  terrain  only  by  ensuring 
that  the  weapon  delivery  Is  initiated  with  parameters 
that  would  result  in  a  flight  path  that  clean  terrain  in 
the  sector  approaching  the  target.  However,  this  tactic 
does  not  take  advantage  of  the  terrain  for  masking  from 
threats,  and  also  places  a  burden  on  the  pilot  for  careful 
attack  planning  to  ensure  timely  target  acquisition,  a 
clear  weapon  trajectory,  and  ground-collision  avoidance. 

Research  would  include  these  developments: 
methods  to  determine  target  Intervisibillty  for  ensuring 
unobstructed  llne-of-sight  for  target  acquisition,  desig¬ 
nation,  and  weapon  delivery;  a  generalized  ground- 
co  11  la  ion-avoidance  system  by  considering  terrain  sur¬ 
rounding  the  projected  ground  track;  optimal  trajectory 
control  algorithms  based  on  knowledge  of  target(s), 
terrain,  and  threats;  and  pilot  situational  displays. 

The  central  thrust  to  our  recommended  follow-on 
research  would  bo  oriented  toward  providing  the  same 
maneuverability  and  safety  of  the  AMAS  system  in  the 
presence  of  terrain.  The  key  performance  characteristics 
are  Illustrated  In  Figure  4.  Because  it  is  necessary  to  see 
beyond  the  local  horizon,  to  see  the  hill  behind  the  hill,  a 
digital-terrain  data  base  Is  absolutely  essential  to  enable 
the  proposed  capabilities.  Integration  of  the  attack  radar 
and  the  digital-terrain  system  will  be  required  to  provide 
the  ground-collision-avoidance  function  in  a  robust 
manner.  Two  very  significant  challenges  would  be  the 
development  of  (1)  a  generalized,  weapon-delivery 
guidance  algorithm  and  (2)  an  all-terrain,  ground- 
collision-avoidance  system. 

A  generalized,  curvilinear,  weapon-delivery 
algorithm  must  account  for  terrain  in  two  ways.  First,  it 
must  guarantee  a  terrain-free  flight  path  of  the  weapon 
to  the  target.  Second,  if  target  designation  is  required, 
as  is  usually  the  case,  then  the  sensor  must  have  a 
terrain-free  line-of-sight  to  the  target  for  some  finite 
time  before  weapon  release.  This  second  constraint  can 
be  very  limiting  to  the  attack  geometry  since  targets 
tend  to  be  located  along  valley  floors.  This  suggests  that 
an  all-terrain,  weapon-delivery  algorithm  must  have  the 
ability  to  "snake",  that  is,  to  allow  turn  reversals  and 
variable  g  command  to  keep  line-of-sight  to  the  target 
without  having  to  climb  too  high.  Other  factors  which 
should  be  considered  in  the  guidance  algorithm  include 
time-over-target  constraints,  weapon  effectiveness,  post- 
re'-ase  constraints,  threat  avoidance,  etc. 

The  attack  planning  will  likely  depend  heavily  on 
pilot  judgment;  therefore,  the  guidance  algorithms  must 
be  adaptive  to  an  iterative  planning  process  so  that  the 
pilot  can  make  the  trade-offs  between  weapon  effec¬ 
tiveness  and  survivability.  A  very  important,  operational 
requirement  that  should  be  considered  is  the  ability  to 
coordinate  the  attack  of  multiple  ships  to  concentrate 
firepower,  permitting  simultaneous  attacks  from  multiple 
directions,  saturating  and  confusing  enemy  defenses.  To 
permit  coordinated  attack,  the  maneuvering  attack 
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Figure  4  Digital  Terrain  System  Integration  Thrust 


algorithms  would  have  to  lend  themselves  to  decon* 
flietion  of  flight  paths  and  weapon  fragmentation 
patterns.  All  these  factors  require  guidance  algorithms 
that  are  predictable  so  that  tactics  can  be  planned  and 
rehearsed  in  a  mission-planning  station  using  a  data  base 
common  to  the  aircraft  system. 

The  development  of  a  prototype  mission-planning 
station  is  viewed  as  an  integral  research  objective  to 
develop  a  support  concept  for  the  generation,  distri¬ 
bution,  and  flight-preparation  of  the  DMA  DLMS  data 
bases  and  other  operational  data  bases  (ops  plan,  frag, 
intelligence,  weather,  etc.).  The  results  of  the  AMAS 
DTMDS  development  have  demonstrated  that  such  data 
bases  can  be  stored,  processed,  and  displayed  in  a  fighter 
aircraft.  The  remaining  hurdle  is  to  develop  the  pro¬ 
cedures  and  protocols  for  the  logistics  of  the  data  base. 
The  planning  at  the  squadron  level  is  absolutely  critical 
to  the  success  of  the  low-altitude  mission.  Pilots  must 
have  the  tools  readily  available  for  target  study,  attack 
planning,  route  planning,  mission  rehearsal,  etc.,  and  it  is 
essential  that  these  tools  be  as  close  to  the  aircraft 
system  configuration  as  possible. 

Fail-safe  operation  is  obviously  paramount  to  any 
practical  application  of  the  above.  A  major  part  of  the 
development  would  be  the  extension  of  the  AMAS 
System-Wide  Integrity  Management  program  to  general¬ 
ized  topography.  A  predictive  algorithm  must  constantly 


monitor  a  projected  flight  path,  as  well  as  possible  escape 
paths.  The  availability  of  a  digital-terrain  data  base  pro¬ 
vides  the  capability  to  see  around  corners  and  eliminate 
the  maneuver  restrictions  of  current  terrain-following/ 
terrain-avoidance  approaches. 

The  digitai-terrain  system  must  be  properly 
integrated  with  the  flight  control  and  avionics  sensors  to 
provide  fail-safe,  fault-tolerant  capability.  Of  foremost 
importance  is  the  registration  of  the  aircraft  position 
within  the  data  base.  Two  independent  position  and 
altitude  correlation  techniques  are  required,  in  addition 
to  the  SITAN  historical  position  correlation,  a  forward- 
looking,  terrain  correlation  technique  is  indicated  using 
radar  measurement.  Other  considerations  that  will 
require  a  forward-looking  radar  are  the  height  measure¬ 
ment  of  terrain  cells  in  the  near-field  for  vertical 
clearance,  as  well  as  for  searching  for  unregistered 
obstacles. 

Pilot  acceptability  is  mandatory  to  the  successful 
implementation  of  an  all-terrain,  maneuvering  attack 
system.  The  pilot  must  have  confidence  in  the  perform¬ 
ance  of  the  system  and  be  able  to  anticipate  maneuvers. 
This  requires  that  the  algorithms  be  predictable,  and  that 
the  flight  path  be  suitably  portrayed  in  relationship  to  the 
terrain.  A  vital  part  of  our  recommended  research  is  the 
integration  of  flight  path,  attitude  control,  and  terrain 
data  into  comprehensible  cockpit  displays.  One  very 


promising  display  format  that  may  tnhanea  head-down 
situational  awareness  is  a  real-time,  space-stabilized, 
pilot-perspective  display. 

The  availability  of  a  digital-terrain  data  base  also 
suggests  new  opportunities  for  weapon  integration.  The 
passive  ranging  for  delivery  of  an  auto-fused  weapon 
dispenser  is  being  demonstrated  in  the  current  AMAS 
Phase.  Several  extensions  of  this  concept  are  poeaible. 
For  standoff  weapons  that  must  navigate  to  a  target 
area,  and  then  search  a  footprint  for  the  target,  weapon 
initialization  release  with  the  best  available  target  and 
aircraft-state  information  would  provide  benefits  in 
weapon  performance  and  reduced  guidance  and  seeker 
costs.  In  addition  to  state  information,  a  navigation 
patch  with  terrain  data  could  also  be  shipped  to  the 
weapon  navigation  computer.  The  weapon  navigation 
autopilot  could  use  vertical  terrain  profiles  for  terrain 
following;  allowing  launch  under  "blind"  (masked) 
conditions  and  target  acquisition  under  low-ceilings.  For 
longer- rang*  standoff  weapons,  like  cruise  missiles, 
terrain  data  can  be  shipped  for  terrain-correlation 
navigation.  On-board  data  also  provides  the  flexibility 
for  retargeting. 


CONCLOSONS 

The  AFT1/F-16  systems  prototype  effort  is  nearly 
concluded  and  the  results  are  now  being  measured 
directly.  The  transition  of  the  OFCS  Phase  technology  is 
understood  and  documented.  The  positive  results  are 
directly  correlated  to  original  program  groundrules  which 
includei 

(1)  A  realistic  test  environment  afforded  by  an 
advanced  technology  fighter  testbed 

(2)  A  concentration  on  the  solution  of  fundamental, 
chronic,  operational  problems 


(3)  The  simultaneous  stressing  of  functional  and 

packaging  technology. 

Adjunct  to  the  systems-level  protoyping,  was  the 
development  of  subsystems  technology,  which  can  be 
measured  in  terms  of  aviation  firsts: 

(1)  First  digital  fly-by-wire  system  flown  on  a 
statically  unstable  aircraft 

(2)  First  airborne  application  of  voice  command 

(3)  First  fully  autopilot-driven,  precision-delivery  of  an 
unguided  bomb 

(4)  First  tactical  fighter  application  of  DLMS-driven 
map  system. 

Today's  technology  makes  the  systems  of  prototype 
as  viable  as  the  airframe  prototypes  of  the  past. 
Hardware  and  software  advances  that  are  currently 
emerging  make  the  extension  of  combat  automation  to  a 
wider  span  of  functions  immediately  available.  Integra¬ 
tion  at  a  scale  previously  reserved  for  FSO  development 
is  accessible  for  prototypes. 
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